Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Cybersecurity Compliance & Assessment Services

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract seeks a Service-Disabled Veteran-Owned Small Business to provide comprehensive cybersecurity compliance and assessment services to the Veterans Benefits Administration under the Department of Veterans Affairs. Key responsibilities include conducting annual security control assessments, maintaining a Plan of Action and Milestones to address identified gaps, supporting Privacy Impact Assessments, and ensuring full alignment with the NIST Risk Management Framework and VA-specific security handbooks. The work is critical to sustaining federal cybersecurity standards and protecting sensitive veteran data through continuous assessment and remediation efforts. All proposal submissions must be received by August 27, 2026, and the opportunity is exclusively set aside for SDVOSBs as defined under FAR 19.14, with the NAICS code 541611 applied for professional, scientific, and technical services in cybersecurity. The contract will be executed as a subcontract and performance is expected to support VA operations without a specified physical location, allowing flexibility in execution while maintaining strict adherence to federal compliance requirements.

General Info

SDVOSB to provide cybersecurity compliance and assessments for VA under NIST and VA handbooks, due August 27, 2026.

Agency

Department Of Veterans Affairs → Veterans Benefits Administration (36C10D)View Agency

NAICS

541611 - Administrative Management and General Management Consulting ServicesView NAICS

Place of Performance

DC

Set-Aside

SDVOSBC

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Veterans Affairs → Veterans Benefits Administration (36C10D)
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Veterans Affairs → Veterans Benefits Administration (36C10D)
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Conduct annual security control assessments (CSCA), maintain POA&M, support Privacy Impact Assessments, and ensure compliance with NIST RMF and VA security handbooks.

Similar Contracts

Same NAICS industry code

NAICS: 541611
New
Federal
Pandemic Plan Preparedness Evaluation Services
Solicitation # IHS1548449
The Indian Health Service is seeking qualified Indian Small Business Economic Enterprises to conduct an independent evaluation of its 2025 Pandemic Preparedness Plan, including the execution of two web-based readiness exercises and the development of comprehensive after-action reports. This firm-fixed-price contract is a 100 percent set-aside under the Buy Indian Act, exclusively available to small businesses that meet the definition of an Indian Economic Enterprise, with at least 50 percent of personnel costs required to be incurred by employees who are members of Indian Tribes or owned by Indian Tribes. Offerors must possess a valid Unique Entity Identifier, maintain current SAM.gov registration, and submit a signed IHS Indian Economic Enterprise Representation Form as a mandatory standalone document to be considered eligible. The work is performed entirely off-site within the United States, with no travel anticipated, and all deliverables—including exercise packages, project management plans, draft and final after-action reports, and quarterly progress reports—must be submitted electronically in accessible, editable formats compliant with Section 508 standards. Evaluation of proposals will focus on technical approach, staffing and management capability, and relevant past performance, with price considered only after non-price factors have been determined to be acceptable. The technical approach must demonstrate a clear understanding of the scope, including the design and facilitation of discussion-based exercises, quality control measures, and adherence to all Statement of Work requirements. Key personnel, including a Project Manager with five or more years of experience in public health or emergency preparedness and a Lead Evaluator/Senior Analyst with seven or more years of experience leading similar exercises, must be identified and may not be replaced without the Contracting Officer’s prior written approval. All Government information must be safeguarded using encrypted, access-controlled systems, with no disclosure permitted without authorization, and all data generated under the contract becomes the Government’s property with unlimited rights. Payment must be submitted electronically through the Treasury’s Invoice Processing Platform, and the contractor must maintain a documented Quality Control Plan covering technical accuracy, version control, accessibility, and information security, though the plan itself is not a deliverable. The contract has a firm start date within three business days of award and a performance end date of July 30, 2027, with all proposals due electronically by 2:00 p.m. Eastern Time on August 14, 2026.
Omas Strategic Buying Center - Professional Services

POSTED

about 9 hours ago

DEADLINE

in 7 days
View Details
NAICS: 541611
New
SLED
Law Enforcement Data Migration and IntegrationThe contract involves the comprehensive assessment, cleansing, validation, and migration of legacy records management system and computer-aided dispatch data into a new platform, with strict adherence to chain-of-custody protocols and audit compliance requirements. This effort targets the modernization of law enforcement data infrastructure, ensuring data integrity, historical accuracy, and regulatory alignment throughout the transition process. The work is scoped to include all phases of data handling—from identifying inconsistencies and redundancies in legacy systems to securely transferring validated information into the updated environment, with documentation and oversight mechanisms in place to meet audit standards. The opportunity is structured as a subcontract under the Massachusetts Executive Office Groups, with a place of performance located in Boston, MA, specifically at 02114. It was posted on August 7, 2026, and bids must be submitted by September 4, 2026, at 9:00 PM. The North American Industry Classification System code 541611 indicates this is for management consulting services, reflecting the need for expert technical and operational guidance in data migration. No set-aside status is specified, and while the contracting office is identified as part of the state’s executive branch, no direct point of contact is listed in the available details.
ENV - Executive Office Groups

POSTED

about 19 hours ago

DEADLINE

in 28 days
View Details
NAICS: 541611
New
SLED
RFP-26095 - MWBE Disparity Study
Solicitation # BPM058312
Baltimore City Public Schools is seeking qualified entities to conduct a comprehensive and legally supportable availability and utilization study to evaluate the presence and extent of discrimination against Minority and Women-Owned Business Enterprises in both the public and private sectors within the Baltimore region. The study must assess how such discrimination impacts contracting and procurement opportunities specifically with City Schools, identifying patterns, barriers, and disparities in access to business opportunities. The selected contractor will be responsible for gathering and analyzing data, engaging stakeholders, and delivering findings that provide a robust evidentiary basis to inform equitable procurement policies. The solicitation, numbered BPM058312 and titled RFP-26095 - MWBE Disparity Study, was posted on August 7, 2026, with proposals due by September 17, 2026 at 4:00 p.m. EST. Questions must be submitted to Procurement Officer Katharine Kamieniecki no later than August 27, 2026 at 3:00 p.m. EST. The contract carries specific procurement goals, requiring at least 15 percent participation by Minority Business Enterprises, with an additional 15 percent specifically designated for African American MBEs and 10 percent for Women-Owned MBEs. Performances will be conducted within Maryland, and the agency responsible is Maryland’s Baltimore City Public Schools under the SLED classification.
Baltimore City Public Schools

POSTED

about 19 hours ago

DEADLINE

in about 1 month
View Details

More opportunities from Department Of Veterans Affairs → Veterans Benefits Administration (36C10D)

Same awarding agency

NAICS: 561499
New
Federal
Data Security & Media Sanitization ServicesThe contract seeks providers of data security and media sanitization services tailored to meet the stringent requirements of the Veterans Benefits Administration under VA Handbook 6500.1, ensuring all handled data is protected through FIPS 140-2 validated encryption and properly sanitized to prevent any risk of data co-mingling or unauthorized recovery. All activities must comply with federal standards for secure data handling and destruction, with emphasis on maintaining the integrity and confidentiality of sensitive veterans’ information throughout the lifecycle of storage media. The requirement is structured as a subcontract and is exclusively set aside for Service-Disabled Veteran-Owned Small Businesses, reflecting a commitment to supporting veteran-owned enterprises while upholding high security benchmarks. The solicitation is open for responses until August 27, 2026, with a posted date of August 6, 2026, and falls under the NAICS code 561499 for other support services. The performance location and point of contact details are not specified, but the award will be managed by the Department of Veterans Affairs through its Veterans Benefits Administration office. Contractors must be prepared to demonstrate proven capability in secure data sanitization practices, compliance with federal information assurance standards, and experience working within highly regulated government environments, particularly those handling sensitive health and benefit records.
All Other Business Support Services

POSTED

1 day ago

DEADLINE

in 20 days
View Details
NAICS: 561621
New
Federal
J063--PACS Preventative Maintenance-Provide preventative maintenance (PMs) bi-annually Base +4
Solicitation # 36C10D26Q0173
The contract seeks a Service-Disabled Veteran-Owned Small Business (SDVOSB) to provide bi-annual preventative maintenance for PACS systems under a solicitation issued by the Veterans Benefits Administration, part of the Department of Veterans Affairs. The work is to be performed for the federal agency located in Washington, DC, with no specified alternate performance location. The solicitation is set aside exclusively for SDVOSBs as defined under FAR 19.14, and the North American Industry Classification System code is 561621, indicating it falls under support services for machinery and equipment. The contract title specifies base performance with an option for four additional periods, suggesting potential for extended service beyond the initial term. The opportunity was posted on August 6, 2026, and responses are due by August 27, 2026, at 8:00 PM Eastern Time. The primary point of contact is Jacalyn T Hainey, Contract Specialist, who can be reached via email at Jacalyn.Hainey@va.gov. The solicitation number is 36C10D26Q0173, and interested parties must respond through the SAM.gov portal using the provided link. No additional details on scope, technical specifications, or evaluation criteria are included beyond the maintenance frequency and set-aside status, indicating further information may be contained in the full solicitation documents accessible via the SAM.gov workspace.
Security Systems Services (except Locksmiths)

POSTED

1 day ago

DEADLINE

in 20 days
View Details
NAICS: 611430
New
Federal
Supervisory Training Delivery (EAP Utilization)The contract seeks a Service-Disabled Veteran-Owned Small Business to develop and deliver annual training for Veterans Benefits Administration supervisors focused on identifying signs of employee distress, effectively referring staff to the Employee Assistance Program, and fostering workplace well-being through both virtual and in-person sessions. The training must be designed to meet the specific needs of VA supervisors and align with federal guidelines for mental health and employee support initiatives. Performance is required to be conducted primarily in Winston-Salem, North Carolina, with a 27155 zip code designation, though virtual delivery options are acceptable to ensure broad accessibility across the organization. The opportunity is classified as a subcontract under NAICS code 611430 for Other Schools and Instruction, and it is exclusively set aside for Service-Disabled Veteran-Owned Small Businesses as defined under FAR 19.14. The solicitation was posted on August 4, 2026, with a firm response deadline of August 10, 2026, at 3:00 PM Eastern Time. While no point of contact is listed, interested parties must ensure their proposals are submitted through the SAM.gov portal, referencing the provided UI link, and demonstrate relevant experience in delivering behavioral health or supervision training within federal or veteran-serving contexts. Compliance with SDVOSB certification and the ability to scale training delivery formats to reach dispersed VA leadership are critical to successful bid consideration.
Professional and Management Development Training

POSTED

3 days ago

DEADLINE

in 3 days
View Details
NAICS: 339999
Federal
6750--Louisville Photography Equipment VR&E
Solicitation # 36C10D26Q0150
The procurement is a Service-Disabled Veteran-Owned Small Business (SDVOSB) set-aside solicitation issued by the Veterans Benefits Administration under solicitation number 36C10D26Q0150, aimed at acquiring photography equipment to support Vocational Rehabilitation and Employment (VR&E) operations at the Louisville Regional Office in Louisville, Kentucky. The contractor must supply a specified list of brand-name or equal photography components including cameras such as the Sony ALPHA a7R V, Fujifilm X-S20, Canon EOS Rebel T7, and Nikon Z50 II, along with lenses, flashes, batteries, memory cards, lighting modifiers, tripods, protective cases, and camera care kits—all in exact quantities as detailed. All items must meet the salient physical, functional, or performance characteristics defined in the solicitation, and any substitute products designated as “equal” must be accompanied by descriptive literature including model numbers, illustrations, or prior submitted data to demonstrate equivalency. Deliveries must be completed within 30 days after contract award, during standard business hours (8:00 a.m. to 5:00 p.m. EST), and all shipping, handling, and associated costs are the responsibility of the offeror, who also retains full liability for loss or damage until final inspection and acceptance by the VBA at the official delivery location of 21 W Main Street, Louisville, KY 40202. The offeror is required to submit a completed price list identifying each item with brand, model number, and quantity, and must comply with the SDVOSB certification requirement, as the solicitation is restricted to small businesses owned and controlled by service-disabled veterans. No contract type, pricing details, payment terms, invoice instructions, or special clauses such as security clearances or options are specified, and while the solicitation outlines technical requirements and delivery obligations, it does not include formal evaluation factors, inspection criteria beyond technical compliance, packaging standards, or a defined award basis such as LPTA or trade-off. All proposals must be submitted by the response deadline of August 12, 2026, to the VA Acquisition Directorate in Washington, DC, with no electronic submission method explicitly defined, implying potential hard-copy submission.
All Other Miscellaneous Manufacturing

POSTED

7 days ago

DEADLINE

in 5 days
View Details
NAICS: 561621
Federal
J063--Preventive Maintenance (PM) and Software Support Service for PACS and Surveillance in the San Diego VARO
Solicitation # 36C10D26Q0168
This contract is a 100% Service-Disabled Veteran-Owned Small Business (SDVOSB) set-aside under FAR 19.14, soliciting preventive maintenance and software support services for the Physical Access Control System (PACS), C-Cure 9000 software, and surveillance systems—including Genetec, Victor, and VideoEdge NVR—at two Department of Veterans Affairs facilities in San Diego and Moreno Valley, California. The base performance period begins September 18, 2026, and extends through September 17, 2027, with four optional one-year extensions through September 17, 2031, allowing for a potential five-year contract duration. The contractor is required to perform annual and semi-annual preventive maintenance tasks, including firmware updates, battery replacements every 24–36 months, power supply inspections, and hardware verification, ensuring all systems comply with VA HSPD-12 identity standards. Emergency response must occur on-site within four hours, while non-emergency issues require resolution by the next business day. All technical work must be performed by Software House Factory and Tyco certified technicians who maintain current manufacturer Software Support Agreements for Genetec, C-Cure, and Tyco systems, ensuring uninterrupted access to security patches, license renewals, and software upgrades. The contractor must submit bi-annual written reports and verify system integrity through comprehensive walkthroughs, including inspection of door hardware, card readers, access sensors, and networked video recorders. Performance occurs exclusively at the two designated VA locations, with contract administration managed through the Veterans Benefits Administration’s Acquisition Directorate in Washington, DC. The solicitation requires offerors to be verified SDVOSBs with active UEI registration, and while the contract value, pricing structure, and evaluation methodology are not disclosed, the stringent technical and service-level requirements suggest a non-LPTA trade-off award preference. No formal packaging, marking, invoicing, or payment office instructions are provided, and submission is expected via email to the designated Contract Specialist by August 18, 2026.
Security Systems Services (except Locksmiths)

POSTED

11 days ago

DEADLINE

in 10 days
View Details
NAICS: 541611
Federal
Small Business Subcontracting Coordination (SDVOSB-Focused)The contract is for support services focused on ensuring compliance with Service-Disabled Veteran-Owned Small Business set-aside requirements for a prime contractor working with the Department of Veterans Affairs. The scope includes full subcontracting plan execution, accurate reporting, and thorough documentation management in alignment with both the Veterans Affairs Acquisition Regulation and the Federal Acquisition Regulation. The work requires a deep understanding of federal procurement rules specific to SDVOSB subcontracting goals, including tracking, monitoring, and maintaining records to demonstrate compliance throughout the life of the prime contract. The contractor must be able to coordinate effectively with the prime to meet all reporting deadlines and audit-ready standards. This is a subcontracting support role under NAICS code 541611, indicating professional, scientific, and technical services related to management consulting. The opportunity is open for response until August 12, 2026, and the performance will be tied to the Veterans Benefits Administration. While the exact location of performance is not specified, the services are inherently tied to federal compliance activities that may require coordination across multiple sites or remotely, depending on the prime contractor’s structure. There is no set-aside type specified in the data, but the focus remains exclusively on SDVOSB compliance, requiring specialized knowledge in veteran-owned business certification and subcontracting plan development.
Administrative Management and General Management Consulting Services

POSTED

21 days ago

DEADLINE

in 5 days
View Details