Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Assessment & Compliance

Open

State & Local

Response Deadline11/30/2026, 03:30:00 PM CST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Cybersecurity Assessment and Compliance involves providing specialized cybersecurity auditing services for prime contractors working on Chicago Transit Authority projects. The selected provider will be responsible for conducting the formal CTA IT Cybersecurity Assessment and ensuring the implementation of Task 4 security requirements. This process requires the use of professional security scanning tools and vulnerability assessment software to identify and mitigate risks. The primary objectives of the engagement are to successfully pass the formal CTA IT Cybersecurity Assessment and deliver a comprehensive assessment report. The ultimate goal is to establish and maintain a secured system environment that meets all agency standards. Interested parties should note the response deadline of November 30, 2026, for this Transit Chicago opportunity.

General Info

Cybersecurity auditing services for CTA projects due by November 30, 2026.

Agency

Illinois → Transit Chicago

NAICS

541519 - Other Computer Related Services

Place of Performance

IL, USA

Set-Aside

NONE

Documents

This scope was carved out of B26OP04192.

The full solicitation package (4 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

B26OP04192 - Request for Proposals (RFP) – Hosting and Maintenance of a Web- Based Risk Management Information System Solution & Services for a Period of up to Five Years with Two One-Year Options.

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 30

subcontract

Response DeadlineNov 30

Submission deadline

Response Deadline

11/30/2026, 03:30:00 PM CSTin 25 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyIllinois → Transit Chicago

ContactsNo contacts available

OfficeN/A

Organization / AgencyIllinois → Transit Chicago

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs cybersecurity auditing for prime contractors on Chicago Transit Authority (CTA) projects. Conducts the CTA IT Cybersecurity Assessment and implements Task 4 security requirements using vulnerability assessment software and security scanning tools. Must pass the formal CTA IT Cybersecurity Assessment. Delivers a cybersecurity assessment report and a secured system environment.

Similar Contracts

Same NAICS industry code

POS System and Internet Service ProvisionThis subcontract for POS System and Internet Service Provision involves the supply and maintenance of internet connectivity and payment processing hardware for prime contractors working on City of Saratoga Springs marina projects. The scope of work includes the installation of routers, POS terminals, and satellite equipment specifically designed for seasonal outdoor environments to ensure a fully functional system for payment processing and connectivity. A critical requirement of the contract is strict adherence to PCI compliance to ensure all payment processing remains secure. Interested parties should note that the response deadline is December 18, 2026, and the project falls under NAICS code 541519.

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Application Maintenance and Break-Fix SupportThis subcontract for Application Maintenance and Break-Fix Support provides essential technical services for prime contractors working on Ohio Department of Transportation software projects. The scope of work focuses on maintaining system uptime for the OHGO platform through continuous performance monitoring, root cause analysis of system failures, and the deployment of emergency patches and hotfixes utilizing application performance monitoring tools. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 24, 2026. Interested parties can find further details and manage the process through the OhioBuys portal.

Dept Of Transportation

POSTED

about 17 hours ago

DEADLINE

Identity, Credentialing, and Access Management (ICAM) Technical OperationsThis 8(a) set-aside subcontract for the Department of the Treasury's Bureau of the Fiscal Service focuses on Identity, Credentialing, and Access Management (ICAM) Technical Operations. The selected provider will deliver operational administration and help desk support for prime contractors, specifically managing PKI, LDAP, SSO, Splunk Vault, and CAIA services. Key technical responsibilities include the integration of SailPoint Identity IQ and Enterprise User Access software, as well as the development of comprehensive ICAM process documentation and the resolution of support tickets. Performance for this contract will take place in Parkersburg, West Virginia, under NAICS code 541519. Personnel assigned to this project are required to hold technical certifications in either Identity Management or SailPoint to ensure the effective delivery of operational ICAM services. Interested parties should note the response deadline of November 16, 2026.

Bureau Of Fiscal Service

POSTED

about 19 hours ago

DEADLINE

Vulnerability Assessment and POAM ManagementThe Vulnerability Assessment and POAM Management subcontract is a Department of the Treasury project for the Bureau of the Fiscal Service, designated as an 8(a) set-aside under NAICS code 541519. The work is centered in Parkersburg, West Virginia, with a response deadline of November 16, 2026. The scope of work involves analyzing vulnerability scan results for prime contractors to provide guidance on closing security issues. Key responsibilities include developing Plan of Action and Milestones documentation, establishing remediation schedules and cost estimates, and performing root cause analysis. The contractor is required to verify closure evidence within GRC tools and deliver completed POAMs and verified remediation documentation.

Bureau Of Fiscal Service

POSTED

about 19 hours ago

DEADLINE

Umano Medical Bed Software SupportThe Umano Medical Bed Software Support subcontract involves providing periodic software enhancements and updates for Umano Medical OOK SNOW ALL Bed systems. This work supports prime contractors on Department of Veterans Affairs facility projects and includes the delivery of updated and verified system software. Services are performed through the remote or on-site installation of software patches and updates utilizing proprietary Umano Medical deployment tools, which requires authorized access to manufacturer software repositories. The contract is associated with NAICS code 541519 and is managed under the Department of Veterans Affairs Network Contract Office 8.

248-NETWORK Contract Office 8 (36C248)

POSTED

about 19 hours ago

DEADLINE

Cybersecurity Sustainment & ATO ManagementThe Cybersecurity Sustainment and ATO Management subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The primary objective is to perform security vulnerability remediation and maintain the Risk Management Framework body of evidence to ensure mobile applications sustain their Authorization to Operate. This work requires remediating vulnerabilities according to DoD policy timelines using government-provided security scanning tools. Key deliverables include updated RMF documentation and detailed vulnerability remediation reports. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 19, 2026.

Defense Health Agency

POSTED

about 19 hours ago

DEADLINE

Cybersecurity & Compliance EngineeringThis subcontract for Cybersecurity and Compliance Engineering supports prime contractors on FBI Enterprise Data Management System projects at Redstone Arsenal. The scope of work focuses on the implementation of critical security measures, including Role-Based Access Control, Multi-Factor Authentication, and automated FISA data minimization marking. The contractor is responsible for developing System Security Plans and Privacy Impact Assessments to facilitate Authority to Operate decisions. The project requires strict adherence to NIST SP 800-53 and FISMA standards to ensure full regulatory compliance. Key deliverables include the provision of security controls and the final attainment of ATO certification. This opportunity falls under NAICS code 541519 and is managed under the Department of Justice.

FBI - Redstone Arsenal

POSTED

about 19 hours ago

DEADLINE

Hand Held Terminals / SOTI Software Requirement

Solicitation # HHT_SOTI

The Defense Commissary Agency (DeCA) is seeking market capabilities through a sources-sought request to establish an end-to-end operational solution for its worldwide enterprise mobile computing fleet. The primary objective is the management of approximately 2,709 Zebra Android Handheld Terminals (HHTs) utilizing the SOTI MobiControl Mobile Device Management (MDM) platform. The scope of work encompasses the provisioning of annual software subscriptions, the deployment and administration of dedicated production and test server environments, and the integration of devices with enterprise retail and warehouse systems. Additionally, the contractor must provide comprehensive depot repair, rapid-exchange warranty administration, and global technical help desk support. Key requirements include the ability to perform turnkey distribution and logistics for all CONUS and OCONUS locations, including secure packaging and customs clearance. The contractor must ensure strict adherence to cybersecurity standards, including Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) support to maintain the system's Authorization to Operate (ATO), with personnel meeting DoD 8140/8570 certifications. The requirement also includes optional life-of-contract technology refreshes for replacement hardware and accessories as equipment reaches end-of-life or end-of-sale status. Interested respondents must be authorized resellers or integrators of the proposed hardware and software, providing new OEM equipment and submitting a capability statement under NAICS 541519 or 541512 by November 9, 2026.

W6QK Acc-Apg Contr Ctr

POSTED

about 19 hours ago

DEADLINE

Department of the Air Force Business and Enterprise Systems (BES) Commercial Solutions Opening (CSO)

Solicitation # FA8771-26-S-C0001

The Department of the Air Force Program Business and Enterprise Systems (BES) has established a multi-year framework via Commercial Solutions Opening (CSO) FA8771-26-S-C0001 to acquire innovative Commercial-Off-The-Shelf (COTS) IT and business solutions. This umbrella solicitation serves as an administrative framework rather than a direct request for proposals, with specific opportunities to be announced through individual open or closed Calls for Proposals published as amendments until March 2, 2030. Awards may be executed as FAR-based contracts or Other Transaction Agreements (OTAs) under 10 USC 2371b. The scope focuses on several key areas, including artificial intelligence, agile methodology, automation, scalability, security, and the reduction of total lifecycle costs of ownership. Eligible participants include traditional and non-traditional defense contractors, research institutions, and both large and small businesses. All offerors must maintain active registration in the System for Award Management (SAM). Evaluation of proposals will be based on the merit of the proposed concept in addressing specific Areas of Interest, focusing on technical soundness, commercial innovation, and price reasonableness, with funds availability serving as a mandatory pass/fail gate. The framework allows for iterative prototyping and the potential for follow-on production contracts, which may be negotiated with or without further competition. While the general framework is open, specific set-asides for small businesses will be determined at the individual call level.

FA8771 Aflcmc Gbk

POSTED

about 19 hours ago

DEADLINE

Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services

Solicitation # W91CRB-27-B-A001

Solicitation W91CRB-27-B-A001 is an 8(a) set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to benefit the Aberdeen Test Center in Maryland. The contractor will provide all necessary personnel, equipment, and non-personal services to establish and maintain Authority to Operate (ATO) and RMF compliance for several key systems, including the ATC Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The scope includes engineering analysis of hardware and software baselines, configuration management support, and architectural design. The period of performance runs from November 23, 2026, to November 22, 2031, consisting of a base year and four option years, with a possible six-month extension through May 22, 2032. The contract is a sealed bid acquisition requiring firm-fixed pricing based on an estimated 2,040 hours per year per labor category, with no allowance for travel or other direct costs. Bids must be submitted electronically by November 12, 2026. Evaluation is based on a pass/fail responsiveness check, which requires at least five years of RMF lifecycle reporting experience and three years of Top Secret environment documentation for the surge position. Key personnel must include a Senior IT Systems Solutions Architect serving as the Contract Manager. Security requirements are stringent, requiring a Secret clearance for most personnel and a Top Secret clearance for the surge position, with all work performed at Aberdeen Proving Ground. Invoicing must be processed through the Wide Area Workflow application.

POSTED

about 19 hours ago

DEADLINE

PMX-281 IT Strategy, Software Modernization, and Digital Decision Intelligence Advisory Subscriptions

Solicitation # N00019-26-RFPREQ-WPM281-0281

Naval Air Systems Command (NAVAIR), through PMX-281, is conducting market research via a Sources Sought Notice to identify capable providers for IT strategy, software modernization, and digital decision intelligence advisory subscriptions. The government intends to satisfy this requirement through the DoD Enterprise Software Initiative (ESI) Blanket Purchase Agreement (BPA) vehicle. The primary objective is to provide leadership with on-demand access to software engineering tools, decision intelligence platforms, and objective advisory services to support the modernization of software for United States Naval Aviation, specifically focusing on AI/ML integration and defense aerospace software architecture. The scope of work includes the provision of specific license tiers: one Team Leader License for executive leadership, five Executive Member Licenses for senior technical leads, and five Integrated Product Team Lead Plus Advisory Member Licenses. Additionally, the contractor must provide on-demand specialized consulting and advisory services. Security requirements are stringent, requiring personnel to be eligible for Top Secret (SCI) clearances and the organization to comply with DD Form 254. While the commercial research portal does not require DoD Impact Level 4 or 5 certification, any interactions involving Controlled Unclassified Information (CUI) or ITAR-controlled data must occur within approved government environments or accredited SCIFs at NAS Patuxent River. Interested respondents must be Prime Holders or Authorized Resellers of an active DoD ESI BPA. Capability statements are limited to eight pages and must be submitted by November 11, 2026. The government is specifically assessing the availability of small business sources, including SDVOSB, WOSB, HUBZone, and 8(a) participants, to determine if a small business set-aside is feasible under FAR Part 8.

Naval Air Systems Command

POSTED

about 19 hours ago

DEADLINE

Fiber Cables and Various Accessories

Solicitation # 80NSSC27946786Q

Solicitation 80NSSC27946786Q is a firm-fixed-price request for quotation issued by the NASA Shared Services Center for the procurement of fiber cables and various network accessories for the Marshall Space Flight Center. The requirement consists of 39 line items from manufacturers such as Prysmian, Panduit, Corning, and Chatsworth, including specific items like 2,000-foot spools of 100 pair 22 AWG PE89 cable. All materials must be listed on the NASA OCIO Approved Products List to ensure compatibility with existing network architectures, cybersecurity requirements, and SCIF accreditation standards. The procurement is open for full competition under NAICS 541519, and all 39 line items must be quoted together. The contract will be awarded to the responsible offeror with the lowest price technically acceptable offer. Quotes are due by November 6, 2026, and must be submitted to Cody Guidry, including the company's SAM CAGE code and two points of contact. Delivery is FOB Destination to Building 4723 in Huntsville, Alabama, with a need-by date of November 2, 2026. The contractor must comply with U.S. export control laws, including ITAR and EAR, and adhere to specific packaging and marking requirements for duty-free entry of supplies.

NASA Shared Services Center

POSTED

about 19 hours ago

DEADLINE

in about 14 hours

More opportunities from Illinois → Transit Chicago

Same awarding agency

C26RI103317777R - REBID - Invitation For Bids (Non- Negotiable) - Furnish and Deliver Twelve (12) Miles of 288 Ribbon Fiber Optic Cable.

Solicitation # C26RI103317777R

POSTED

DEADLINE

Technical Documentation & Training ServicesThis subcontract for Technical Documentation and Training Services involves the development of functional documentation and the provision of user training for prime contractors working on Chicago Transit Authority projects. The scope of work includes creating technical materials, source code, and schematics in accordance with Exhibit 13 specifications, as well as conducting live database testing with key users. The selected provider will deliver comprehensive technical manuals and functional documentation while ensuring staff members across the Technology, Risk Management, HR, and Law departments are properly trained. This opportunity is managed by Transit Chicago in Illinois, with a response deadline set for November 30, 2026.

Document Preparation Services

POSTED

DEADLINE

System Implementation & Data Migration ServicesThis subcontract for System Implementation and Data Migration Services involves the installation, configuration, and migration of legacy data for prime contractors working on Chicago Transit Authority projects. The selected provider will execute an Implementation and Integration Plan to move data from various silos and TPA interfaces into a centralized RMIS utilizing API interfaces. The project requires the delivery of a fully populated system and a final Integration Plan, subject to a validated 30-day verification period to ensure load durability and reliability. This opportunity is categorized under NAICS code 541511 and is managed by Transit Chicago in Illinois, with a response deadline of November 30, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

RMIS Software Licensing & HostingThis subcontract for RMIS Software Licensing and Hosting involves the provision and hosting of a web-based Risk Management Information System designed for prime contractors working on Chicago Transit Authority projects. The selected provider is responsible for managing the cloud hosting environment and ensuring full system compatibility with CTA technical standards, specifically adhering to established response time and disaster recovery requirements. The contractor must hold industry-standard IT firm certifications to deliver a fully functional and hosted RMIS system. This opportunity is categorized under NAICS code 518210 and is managed by Transit Chicago in Illinois, with a response deadline set for November 30, 2026.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

B26OP04192 - Request for Proposals (RFP) – Hosting and Maintenance of a Web- Based Risk Management Information System Solution & Services for a Period of up to Five Years with Two One-Year Options.

Solicitation # B26OP04192

The Chicago Transit Authority (CTA) is soliciting proposals for the hosting and maintenance of a web-based Risk Management Information System (RMIS) solution and related services. This software license and professional services contract is intended for a base period of up to five years, with two optional one-year extensions. The scope of work requires the consultant to provide a fully usable system, including the complete migration of all data and files, detailed functional documentation, and technical materials such as source code and schematics. The system must adhere to industry standards for nationally recognized IT firms, utilize proven current technology, and remain compatible with the CTA's technical environment, including specific response time and disaster recovery requirements. Award will be based on a best-value trade-off approach, prioritizing superior technical and management features over the lowest cost. Key evaluation factors include the firm's ability to perform the scope of work, the project team's experience with similar projects, and the timeliness of the implementation and integration plan. The CTA employs a rigorous inspection and acceptance process, including a validation period of at least thirty days to verify configuration, load durability, and reliability. Proposers must submit their responses in five electronic parts: a technical proposal, a price proposal, a bidder list, financial background, and a set of certifications and disclosures. Required certifications include disclosures regarding debarment, lobbying, drug-free workplaces, and ownership. The contract includes strict compliance mandates regarding the Americans with Disabilities Act, equal employment opportunities, and cybersecurity assessments. Payment is structured as a fixed-fee engagement, with progress payments issued upon the satisfactory performance of deliverables and final payment following the acceptance of the entire scope of services and the provision of all required warranties.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

AV and Furniture Setup/Takedown ServicesThis subcontract for AV and Furniture Setup/Takedown Services involves providing physical installation and removal of event equipment and furniture for prime contractors on Chicago Transit Authority projects. The scope of work includes the setup and teardown of rented furniture as well as CTA-furnished items such as projection screens, projectors, sound systems, and Multi-Box/Press Boxes. The selected provider must maintain Workers Compensation and General Liability insurance with a two million dollar aggregate limit. Interested parties must submit their responses by November 23, 2026, to support operations managed by Transit Chicago in Illinois.

All Other Travel Arrangement and Reservation Services

POSTED

DEADLINE

ADA-Compliant Venue ProcurementThis subcontract for ADA-Compliant Venue Procurement involves locating and reserving meeting spaces for prime contractors working on Chicago Transit Authority event planning projects. The selected provider is responsible for sourcing facilities that are fully ADA-accessible and equipped with the necessary audio-visual infrastructure to meet specific agency requirements. The scope of work includes managing the entire booking process to ensure all venues adhere to ADA standards and CTA specifications. This opportunity is issued by Transit Chicago in Illinois, with a response deadline set for November 23, 2026.

All Other Travel Arrangement and Reservation Services

POSTED

DEADLINE

Public Outreach Meeting StaffingThis subcontract for Public Outreach Meeting Staffing involves providing on-site personnel to support prime contractors during Chicago Transit Authority public outreach projects. The selected provider will supply one to two representatives to assist at meetings, with the flexibility to work both standard and non-standard hours to ensure a consistent on-site presence and effective event assistance. To qualify for this role, personnel must adhere to strict compliance standards, including Drug-Free Workplace certification and comprehensive background screenings that encompass criminal history and the FBI Terrorist Screening Database. Interested parties should note the response deadline of November 23, 2026, for this opportunity managed under NAICS code 561320.

Temporary Help Services

POSTED

DEADLINE

B26FC04926-Request for Proposals Event Planning Services for Five Years

Solicitation # B26FC04926

The Chicago Transit Authority is soliciting proposals for a professional services contract to provide event planning services over a five-year term. The scope of work includes locating and reserving ADA-accessible venues with audio-visual infrastructure and managing the setup and takedown of both CTA-furnished and rented equipment. The contract involves various event types, including public outreach meetings, stakeholder meetings, and emergency stakeholder meetings, occurring during both standard and non-standard hours. Key personnel must possess at least five years of experience in event planning of a similar magnitude, with at least three of those years specifically within the Chicago metropolitan area. Award decisions will be based on the greatest benefit to the CTA, evaluating the firm's ability to meet needs, personnel qualifications, and the price proposal. Proposers must submit a technical proposal, a price proposal, and a bidders list via the Bonfire electronic procurement portal. Compliance requirements include adherence to the Identity Protection Act, Title VI of the Civil Rights Act, and Disadvantaged Business Enterprise (DBE) requirements. Additionally, the selected contractor must utilize the B2GNow system for reporting subcontractor payments and provide various certifications regarding debarment, lobbying, and a drug-free workplace.

Convention and Trade Show Organizers

POSTED

DEADLINE

B26OP04834 – Request for Proposals (RFP) for a Web- Based Environmental Health and Safety Management Software System (EHS), Including Implementation, Support and Services for Three Years with Two One-Year Options

Solicitation # B26OP04834

Transit Chicago is soliciting proposals for the procurement of a web-based Environmental Health and Safety Management Software System. The scope of the contract includes the initial implementation of the EHS system along with ongoing support and services. The agreement is structured for an initial term of three years, with the possibility of two additional one-year extensions. Interested parties must submit their responses by the deadline of November 20, 2026. This solicitation, identified by number B26OP04834, is managed by the agency in Illinois and requires the selected provider to deliver a comprehensive software solution to manage environmental health and safety operations.

Software Publishers

POSTED

DEADLINE

Civil Engineering & Site PlanningThis subcontract for Civil Engineering and Site Planning involves providing specialized site planning and engineering services for prime developers working on Chicago Transit Authority transit-oriented development projects. The primary scope of work includes the creation of detailed site plans that specify necessary access points for loading and service, specifically focusing on areas located under elevated track structures. Qualified candidates must possess specific expertise in Under-L use and a thorough understanding of CTA right-of-access agreements. The successful contractor will be responsible for delivering fully approved engineering drawings and site plans. This opportunity is categorized under NAICS code 541330 and is managed by Transit Chicago in Illinois, with a response deadline of November 13, 2026.

Engineering Services

POSTED

DEADLINE

Environmental Due Diligence & TestingThis subcontract opportunity with Transit Chicago involves providing comprehensive environmental due diligence and testing for transit-oriented development projects. The selected provider will be responsible for performing Phase I and Phase II Environmental Site Assessments, as well as geotechnical testing, to support prime developers. Key technical tasks include conducting soil sampling and groundwater testing to identify and report on contaminants, culminating in the delivery of detailed environmental audit reports and geotechnical soil reports. To qualify for this engagement, firms must employ licensed environmental engineers or geologists. The project falls under NAICS code 541620. Interested parties should note that the response deadline is November 13, 2026, with the solicitation having been posted on October 13, 2026.

Environmental Consulting Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS