Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Auditing and Compliance Services

Active

State & Local

Response Deadline11/05/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity Auditing and Compliance Services subcontract, managed by the Internal Services Department in Los Angeles, involves performing independent security audits and compliance reviews for prime contractors on County of Los Angeles SaaS projects. The selected provider will identify control deficiencies, verify corrective actions, and ensure data protection procedures align with state and federal laws. Technical execution requires the use of vulnerability scanners and adherence to NIST or ISO 27001 frameworks. Key deliverables include comprehensive audit reports, corrective action plans, and formal certifications for the CISO. This opportunity is categorized under NAICS code 541690 and is focused on performance within Los Angeles. Interested parties should note the response deadline of November 5, 2026.

General Info

Cybersecurity auditing and compliance services for LA County SaaS projects due November 5, 2026.

Agency

California → Internal Services Department

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Los Angeles, CA, USA

Set-Aside

NONE

Documents

This scope was carved out of RFB-IS-27200297.

The full solicitation package (5 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

1093943 -SOFTWARE- RENEWAL- ZSCALER (BRAND ONLY)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 29

subcontract

Response DeadlineNov 5

Submission deadline

Response Deadline

11/05/2026, 08:00:00 PM UTCin 6 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia → Internal Services Department

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia → Internal Services Department

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs independent security audits and compliance reviews for prime contractors on County of Los Angeles SaaS projects. Conducts security audits to identify control deficiencies, verifies corrective actions, and reviews data protection procedures for state and federal law compliance. Utilizes vulnerability scanners and NIST or ISO 27001 frameworks. Delivers audit reports, corrective action plans, and certifications for the CISO.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

DEADLINE

Information Security Framework Alignment SpecialistThe Information Security Framework Alignment Specialist subcontract supports prime contractors on Ohio Department of Public Safety projects by performing critical audits and security alignment. The primary scope of work involves mapping Commvault security controls to established frameworks, including NIST 800-53, NIST 800-171, or CMMC, while utilizing specialized auditing tools to conduct comprehensive security gap analyses. Key deliverables for this engagement include risk assessments, security alignment documentation, and detailed compliance reports. Qualified candidates must hold professional certifications such as CISSP, CISM, or specific NIST/ISO framework credentials. This opportunity is categorized under NAICS code 541690 and is associated with the Department of Public Safety's Information Technology division. Interested parties should note the response deadline of November 16, 2026.

Dps760000 Information Technology Cdsb, Dps-dept Of Public Safety

POSTED

about 22 hours ago

DEADLINE

Railway Safety Management System (SMS) Auditing and ReportingThis subcontract involves performing comprehensive audits of Railway Safety Management Systems files for prime contractors working on City of Tshwane railway projects in Tshwane-Pretoria, South Africa. The selected provider is responsible for reviewing current files to ensure full compliance with railway safety standards and delivering a detailed audit report. The contractor must provide all technological equipment necessary to conduct the audits and generate the final documentation. To be eligible, applicants must possess B-BBEE status, CSD registration, and SARS Tax Compliance. The solicitation was posted on October 29, 2026, with a response deadline of November 11, 2026.

City of Tshwane

POSTED

about 23 hours ago

DEADLINE

Maritime Security Consulting & Planning

Texas A&M University

POSTED

about 23 hours ago

DEADLINE

Ballistic Vest Fitting SpecialistThis subcontract opportunity is for a Ballistic Vest Fitting Specialist to provide professional sizing and fitting services for prime contractors supporting the Snohomish County Sheriff's Office. The selected specialist will be responsible for conducting fitting sessions for personnel using specialized sizing kits and measurement tools to ensure that equipment meets all requirements for form, fit, and function during daily law enforcement operations and extended wear. The final deliverable for this engagement is the submission of completed sizing and fitting reports for all personnel. Interested parties must provide references demonstrating that they have performed similar services for at least one year. This opportunity was posted on October 29, 2026, with a response deadline of November 17, 2026. The project falls under NAICS code 541690 and is associated with the agency of Snohomish County in Washington.

Snohomish County

POSTED

DEADLINE

Educational Privacy Compliance & Audit Services

DOD Education Activity

POSTED

DEADLINE

Network Security & CSfC Compliance ConsultingThis subcontract for Network Security and CSfC Compliance Consulting supports prime contractors on DARPA FastVacc projects by providing specialized domain expertise. The primary objective is to validate automated tools against rigorous security standards, specifically defining ground truth for Zero Trust Architecture and CSfC capability packages to ensure the technical accuracy of tool outputs. The selected provider must possess expert-level certifications, such as CISSP or CISM, to deliver critical validation reports, test cases, and professional policy interpretations. This effort falls under NAICS code 541690 and is managed under the Department of Defense for the Defense Advanced Research Projects Agency.

Defense Advanced Research Projects Agcy

POSTED

DEADLINE

Diminishing Manufacturing Sources and Material Shortages (DMSMS) Consultant

DLA Land At Aberdeen

POSTED

DEADLINE

in about 1 month

Data Processing and Statistical Weighting ServicesThe Department of Veterans Affairs, specifically Rpo East, is seeking a subcontractor to provide Data Processing and Statistical Weighting Services for longitudinal studies. The selected provider will be responsible for cleaning raw data sourced from web and CATI platforms and calculating statistical weights to address Veteran oversampling. This work requires deep expertise in longitudinal survey methodology and proficiency in statistical analysis software such as SAS, SPSS, Stata, or R. The primary deliverables for this engagement include cleaned datasets and survey weights for both baseline and follow-up waves. Interested parties should note that the response deadline is November 13, 2026, and the services fall under NAICS code 541690.

Rpo East (36C24E)

POSTED

DEADLINE

Supply Chain Intelligence & Risk Research (SME Services)This subcontract for Supply Chain Intelligence and Risk Research provides subject matter expertise to the Department of Defense Weapons agency, specifically supporting Air Force Life Cycle Management Center munition programs. The primary objective is to perform deep-dive research and analysis into the origins of raw materials used by prime contractors. This involves mapping complex supply chains from end items back to raw materials while conducting comprehensive financial, manufacturing, and geopolitical risk assessments of suppliers. To execute these tasks, the contractor will utilize financial risk databases and market intelligence tools to identify vulnerabilities. The final deliverables consist of detailed supply chain maps and risk assessment reports. The opportunity is categorized under NAICS code 541690, with a response deadline of November 16, 2026, and performance located in zip code 32548.

POSTED

DEADLINE

SPII Compliance and Data Security ServicesThis small business set-aside subcontract, titled SPII Compliance and Data Security Services, is issued by the Department of Homeland Security's Incident Support Section. Based in Washington, the contract focuses on providing critical security infrastructure and sensitive personally identifiable information compliance management for prime contractors working on FEMA Individual Assistance projects. The scope of work involves the implementation of DHS Management Directive 11042.1 and Policy Directive 4300A, alongside the management of DHS Form 11000-6 non-disclosure agreements. The service provider is responsible for maintaining a secure data handling environment and utilizing encrypted transmission tools to monitor for sensitive information incidents. All operations must strictly adhere to the DHS 4300A Sensitive Systems Handbook. Key deliverables include the provision of regular compliance reports to ensure all data security protocols are met and maintained throughout the project lifecycle.

Incident Support SECTION(ISS70)

POSTED

DEADLINE

Senior Advisor 2 for Biological Therapeutics Development to act as External Oversight Committee (EOC) Subject Matter Expert (SME) Services.

Solicitation # 7571PSQ00013

Solicitation 7571PSQ00013 is a small business set-aside for a Senior Advisor 2 Subject Matter Expert to support the NIH HEAL Initiative and the Blueprint Neurotherapeutics Network for Biologics. The selected contractor will serve on the External Oversight Committee, providing executive-level strategic guidance, programmatic reviews, and mentorship to advance non-opioid drug discovery and development. The scope of work emphasizes expertise in biologics, including candidate discovery, IND-enabling studies, early-phase clinical trials, and regulatory compliance regarding Chemistry, Manufacturing, and Controls. The contract is a Firm Fixed Price purchase order with a base period from November 13, 2026, to November 14, 2027, and two subsequent one-year options. The anticipated level of effort is 50 labor hours per year, with an annual travel reimbursement limit of 2,000 dollars per consultant. Awards will be based on best value, with technical personnel qualifications weighted at 100 points and considered significantly more important than price and past performance. Proposed key personnel must provide resumes and letters of commitment, and their direct annual salary is capped at the Executive Schedule, Level II. Performance will primarily occur at the contractor site, with occasional on-site visits to Bethesda, Maryland. Contractors must adhere to strict security protocols, including annual NIH Security and Privacy Training and the signing of a non-disclosure agreement. Invoicing must be processed electronically through the Department of Treasury Invoice Processing Platform. Quotes are due by November 5, 2026, and must include a completed pricing template, a technical narrative, and up to two relevant past performance examples.

Omas Strategic Buying Center - Professional Services

POSTED

DEADLINE

More opportunities from California → Internal Services Department

Same awarding agency

Hardware Provisioning and Asset ManagementThis subcontract, titled Hardware Provisioning and Asset Management, is issued by the Internal Services Department for projects within the County of Los Angeles. The selected provider is responsible for supplying and managing physical hardware devices for prime contractors working on SaaS projects. Key operational requirements include performing inventory tracking, loss prevention, and configuration updates for all devices that connect to County systems. The provider must implement strict hardware security controls in accordance with Information Security Exhibit Addendum B and maintain comprehensive management records. The primary objective of the contract is the delivery of a fully managed hardware inventory and the maintenance of operational devices. The performance of these services will take place in Los Angeles.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Software Implementation and Training ServicesThis subcontract for Software Implementation and Training Services supports the County of Los Angeles Internal Services Department. The selected provider will be responsible for the installation and configuration of SaaS platforms for prime contractors, including the management of software and firmware upgrades and the creation of comprehensive technical documentation. The scope of work emphasizes operational readiness through professional training for County staff and successors to ensure long-term platform performance. The ultimate goal of the engagement is the delivery of a fully implemented SaaS platform and a workforce capable of maintaining the system. Performance will take place in Los Angeles.

Custom Computer Programming Services

POSTED

DEADLINE

Cloud Infrastructure and Hosting ServicesThis subcontract for Cloud Infrastructure and Hosting Services, managed by the Internal Services Department in Los Angeles, focuses on providing and managing secure cloud environments for prime contractors working on County of Los Angeles SaaS projects. The scope of work includes the provisioning of off-site hardened or segmented environments and the implementation of daily backups for all County information. To ensure high availability and resilience, the provider must maintain a Business Continuity Plan featuring distributed IT infrastructure and mirrored critical systems capable of data retrieval within a two-hour window. The contract requires the service provider to carry Cyber Liability Insurance to mitigate risks associated with data hosting. Interested parties should note that the response deadline is November 5, 2026, and the services will be performed within Los Angeles. The project falls under NAICS code 518210, emphasizing the delivery of a secure and resilient hosting environment.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

1093943 -SOFTWARE- RENEWAL- ZSCALER (BRAND ONLY)

Solicitation # RFB-IS-27200297

The Internal Services Department for the County of Los Angeles has issued solicitation RFB-IS-27200297 for a brand-only software renewal of Zscaler services. The procurement focuses on the Zscaler zFlex Program for a multi-year period, with the first year spanning from November 15, 2026, to November 14, 2027. The scope includes a comprehensive suite of security and networking components, including SASE platform users, data protection, cyber threat protection for 102,000 users, security operations, private access, zero trust for workloads, and AI security. The award will be granted to the lowest total acceptable offer that meets all technical requirements, including the mandate that software be new, unused, current models, and factory-integrated. Bids must be submitted exclusively through the Vendor Self Service portal by November 5, 2026. Proposers are required to submit a variety of certifications and forms, including the Community Business Enterprise information in Excel format and documentation regarding prevailing wages and human trafficking. The contract includes strict cybersecurity requirements, such as maintaining cyber liability insurance and adhering to NIST SP 80088 standards for data destruction. Additionally, the agreement specifies a payment cap of 200,000 dollars per fiscal year for a single vendor without a Board-approved service contract. Preference considerations are available for Local Small Business Enterprises, Social Enterprises, and Disabled Veterans Business Enterprises.

POSTED

DEADLINE

Singlewire InformaCast Software Licensing & Maintenance SupplierThis subcontract agreement establishes a partnership to provide brand-specific software subscription licenses and maintenance for prime contractors working on Los Angeles County Internal Services Department projects. Specifically, the contract covers the delivery of InformaCast Advanced Notification Subscription Licensing under SKU SS1YRAMTIER 3 for the 2026-2027 period. The agreement mandates strict adherence to NIST SP 80088 standards for media sanitization and requires compliance with international child labor standards. Performance of the contract will take place in Los Angeles, falling under NAICS code 513210 for software publishing.

Software Publishers

POSTED

DEADLINE

Supply of High-Pressure Stainless Steel Multi-Jet Water MetersThis subcontract through the California Internal Services Department involves the supply of residential high-pressure stainless steel multi-jet water meters for prime contractors working on Los Angeles County Waterworks Districts projects. The selected vendor must be a manufacturer or an authorized dealer or distributor capable of providing meters in sizes 3/4 inch, 1 inch, 1 1/2 inch, and 2 inch on an as-needed basis. The contractor is responsible for the transportation and delivery of the specified equipment to designated field offices located in Malibu and Lancaster, California. Interested parties must submit their responses by the deadline of November 18, 2026.

Printed Circuit Assembly (Electronic Assembly) Manufacturing

POSTED

DEADLINE

SHOKZ Headsets, DMH

Solicitation # RFB-IS-27200294

The Internal Services Department for California has issued solicitation RFB-IS-27200294 for the procurement of SHOKZ Headsets for DMH. This opportunity was posted on October 28, 2026, with a response deadline set for November 11, 2026. The contract is categorized as a SLED organization procurement, and the place of performance is located in Los Angeles, California. Interested parties may contact Sophia Hsu, the primary point of contact, via email at [email hidden] or by phone at [phone hidden] for further inquiries.

POSTED

DEADLINE

WATER METERS HIGH PRESSURE 3 YEAR AGREEMENT

Solicitation # RFB-IS-27200293

The Internal Services Department for Los Angeles County is soliciting bids under RFB-IS-27200293 for a three-year agreement to provide residential high-pressure water meters on an as-needed basis. The selected vendor will supply high-pressure stainless steel multi-jet meters in sizes 3/4 inch, 1 inch, 1 1/2 inch, and 2 inch, featuring either manual or electronic registers. All equipment must be new, unused current models that comply with AWWA, NRDC, ISO 4064, NSF61G, and Proposition 65 standards, specifically requiring a 600 psi working pressure and 1,200 psi bursting pressure. Deliveries are to be transported to field offices located in the City of Lancaster and Malibu. The award process requires bidders to first meet all minimum mandatory requirements, after which the primary evaluation factor will be pricing. Bidders must submit a comprehensive package via the Vendor Self Service portal by November 18, 2026, including technical specifications, signed purchasing forms, and a specific Community Business Enterprise Excel document. The County encourages participation from SBE, LSBE, DVBE, SE, and CBE entities. Key contractual obligations include compliance with California State Labor Code prevailing wages, the provision of manufacturer specifications within one week of a purchase order, and granting the County priority for deliveries during disastrous events. Payment is primarily handled via EFT or direct deposit, contingent upon the successful completion of a 30-day incoming acceptance test conducted by the County.

Totalizing Fluid Meter and Counting Device Manufacturing

POSTED

DEADLINE

1093535-SINGLEWIRE INFORMACAST LICENSES MAINTENANCE - BRAND

Solicitation # RFB-IS-27200295

Solicitation RFB-IS-27200295 is a Request for Bid issued by the Internal Services Department of the County of Los Angeles for the procurement of Informacast Advanced Notification Subscription Licensing, specifically manufacturer part number SS1YRAMTIER 3. The contract covers a one-year performance period from October 1, 2026, through September 30, 2027. The County requires electronic delivery of all software and updates, specifying that software must be new, unused, current versions covered by the original developer warranty. Bids must be submitted via the Vendor Self Service portal by November 4, 2026, and must include a completed solicitation document, required Appendix A forms, letters of authorization from the manufacturer, and a Certificate of Insurance. The award will be granted to the most responsive and responsible bidder, with a preference for products manufactured in Los Angeles County or the State of California. Bidders must comply with strict regulatory standards, including California Labor Code requirements for payroll records and prevailing wages, as well as NIST Special Publication SP 80088 for data destruction. The contract mandates that the vendor maintain insurance, as failure to do so is considered a material breach. Additionally, the vendor must certify compliance with international child labor standards. Payment will be processed by the Auditor-Controller via Electronic Funds Transfer, and the County retains the right to conduct acceptance testing within 30 days of receipt to ensure performance meets departmental operating requirements.

Software Publishers

POSTED

DEADLINE

27-00240 TRAFFIC PLAN SOW

Solicitation # RFB-IS-27200273

The Internal Services Department for the state of California has issued solicitation RFB-IS-27200273 for a Traffic Plan Statement of Work. This project is designated for performance in Los Angeles, California, and is managed by the SLED organization type. Interested parties must submit their responses by the deadline of November 16, 2026, at 8:00 PM. The primary point of contact for this solicitation is Kristy Yee, who can be reached via email or phone for further inquiries regarding the bid process.

POSTED

DEADLINE

RED HAT ANSIBLE RENEWAL- BRAND SPECIFIC- AMENDMENT# 1 (PG 19

Solicitation # RFB-IS-27200284

The Los Angeles County Internal Services Department is soliciting bids for a brand-specific renewal of Red Hat Ansible software subscriptions, specifically for Red Hat Runtimes, Premium (2 Cores or 4 vCPUs) for a one-year term. The period of performance for this renewal is scheduled from February 18, 2027, to February 17, 2028. This is a brand-specific procurement where substitutions are not permitted, and the award will be granted to the lowest total acceptable offer. Bidders must be authorized distributors, resellers, or service providers and are required to submit a letter of certification on the manufacturer's letterhead to be considered responsive. All bids must be submitted electronically via the Vendor Self Service portal by November 5, 2026, at 12:00 PM. Required documentation includes a completed specification sheet and various certifications found in Appendix A, such as the Proposer's Organization Questionnaire and Community Business Enterprise information. The contract includes standard County terms, including a 90-day warranty from acceptance, a 10-day notice for termination for convenience, and a requirement for general liability insurance with a 2 million dollar aggregate limit. Additionally, vendors must comply with California Labor Code prevailing wage scales and NIST SP 80088 standards for data destruction.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

GRANICUS SUBSCRIPTION - BRAND SPECIFIC- AMENDMENT# 1 (PG 19)

Solicitation # RFB-IS-27200276

The Los Angeles County Internal Services Department is soliciting bids for a brand-specific renewal of Granicus subscriptions under solicitation RFB-IS-27200276. This procurement is strictly brand-specific, and no substitutions are permitted. The scope of work includes annual subscriptions for a FOIA Module Non-Enterprise, Hosted Data Storage, Redaction Licenses per named user, and additional Granicus subscriptions. The performance period for these services is scheduled from September 20, 2026, to September 19, 2027, with performance taking place in Los Angeles, California. Bids must be submitted exclusively through the Vendor Self Service portal by November 9, 2026, at 12:00 PM. Required documentation includes a comprehensive set of forms from Appendix A, such as the Proposer’s Certification of Compliance and the Community Business Enterprise Information Form, as well as a manufacturer's letter of certification for authorized resellers. The County will award the contract to the most responsive and responsible bidder based on factors including past performance and financial stability. Payment will be made via Electronic Funds Transfer with standard net 30 terms, though certified Local Small Business Enterprises may receive prompt payment within 15 calendar days. This is not a federally funded purchase.

Software Publishers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS