Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance and ATO Support

Active

Federal

Response Deadline11/05/2026, 04:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Cybersecurity Compliance and ATO Support focuses on establishing and maintaining the security posture and Authority to Operate for prime contractors working on CMS Medicare Appeals projects. The selected provider will be responsible for developing System Security Plans, conducting Assessment and Authorization activities, and implementing security controls in accordance with NIST SP 800-53 and 800-171 standards. Additionally, the contractor must manage Controlled Unclassified Information as mandated by Executive Order 13556 to ensure a valid ATO and a completed A&A Package. Managed by the Department of Health and Human Services under the Office of Acquisition and Grants Management, this opportunity falls under NAICS code 541512. The solicitation was posted on October 15, 2026, with a response deadline of November 5, 2026.

General Info

Cybersecurity compliance and ATO support for CMS Medicare Appeals using NIST security standards.

Agency

Department Of Health And Human Services → Ofc Of Acquisition And Grants Management

NAICS

541512 - Computer Systems Design Services

Place of Performance

MD, USA

Set-Aside

NONE

Documents

This scope was carved out of RFICMSQIC2026.

The full solicitation package (14 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Request for Information - CMS' Qualified Independent Contractor (QIC) Program

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 15

subcontract

Response DeadlineNov 5

Submission deadline

Response Deadline

11/05/2026, 04:00:00 PM UTCin 20 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Health And Human Services → Ofc Of Acquisition And Grants Management

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Health And Human Services → Ofc Of Acquisition And Grants Management

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Establishes security posture and maintains Authority to Operate (ATO) for prime contractors on CMS Medicare Appeals projects. Develops System Security Plans (SSP), conducts A&A activities, and implements controls per NIST SP 800-53 and 800-171. Manages CUI per Executive Order 13556. Delivers a valid ATO and completed A&A Package.

Similar Contracts

Same NAICS industry code

Cybersecurity Resilience & NIST Compliance ConsultantHagerty Consulting, Inc. is seeking a Cybersecurity Resilience and NIST Compliance Consultant for a subcontracting opportunity focused on developing cybersecurity recovery protocols for prime contractors involved in Inland Empire Utilities Agency resilience projects. The selected consultant will implement the NIST Risk Assessment Framework to optimize incident response and establish performance goals for the recovery of critical infrastructure. A primary objective is to ensure that Business Continuity Plans and Disaster Recovery Plans align with CISA standards to effectively protect against cyber-attacks. This opportunity is designated as a set-aside for Disadvantaged Business Enterprises under the Department of Transportation. Interested parties must submit their responses by November 17, 2026. The scope of work culminates in the delivery of specialized cybersecurity protocols and comprehensive plan sections designed to enhance the overall resilience of utility infrastructure.

Hagerty Consulting, Inc.

POSTED

about 10 hours ago

DEADLINE

in about 1 month

MetroAccess Fare Collection and Management System

Solicitation # WMATA-0000010941

The Washington Metropolitan Area Transit Authority is seeking proposals for the MetroAccess Fare Collection and Management System under solicitation number WMATA-0000010941. This project falls under NAICS code 541512, focusing on computer systems design services to enhance the transit authority's ability to manage and collect fares for its MetroAccess services. The solicitation was posted on October 16, 2026, with a response deadline set for October 27, 2026. Interested parties must submit their responses through the official supplier portal by the specified cutoff time to be considered for this procurement opportunity.

Washington Metropolitan Area Transit Authority

POSTED

about 10 hours ago

DEADLINE

SCADA Software Design and IntegrationThe SCADA Software Design and Integration subcontract involves the design and development of a centralized SCADA software platform for prime contractors working on water utility projects for the Regional District of Bulkley-Nechako in British Columbia. The scope of work includes configuring monitoring systems for sensors, pumps, and chlorine dosing, implementing historical data reporting, and establishing a fail-safe architecture to ensure independent operation. The final deliverable is a fully functional SCADA system featuring both desktop and mobile HMI access. A critical requirement of the project is ensuring that all data residency remains within Canada. Interested parties must adhere to the response deadline of November 17, 2026, for this technical integration project categorized under NAICS code 541512.

Regional District of Bulkley-Nechako

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Water Utilities Supervisory Control and Data Acquisition

Solicitation # RDBN-FFWT-26-01

The Regional District of Bulkley-Nechako is soliciting proposals under solicitation number RDBN-FFWT-26-01 to design, develop, and install a Supervisory Control and Data Acquisition (SCADA) system for the Fort Fraser Water Utilities in British Columbia. The objective is to create a centralized platform for communications, system monitoring, alarm management, and historical data reporting. The system must enable the control of pumps, sensors, alarms, and chlorine dosing via desktop computers in Burns Lake and remote mobile devices. Key technical requirements include the installation of a new primary control panel, ensuring the water system can operate independently during connectivity failures, and utilizing an encrypted VPN with Multi-Factor Authentication for secure remote access. Additionally, all off-site data storage and backups must be hosted within Canada, and the system must comply with provincial and federal privacy and security regulations. Proposals are due by November 16, 2026, and will be evaluated on a best-value basis using a points system. The evaluation consists of mandatory criteria, including the conflict of interest disclosure and proposed schedule, followed by scored criteria focusing on total cost (50 points) and quote quality (10 points). Higher scores will be awarded to proponents offering ongoing troubleshooting support and staff training. The selected consultant must provide professional liability insurance of at least $2,000,000 and adhere to the Workers' Compensation Act of British Columbia. Submissions must be provided as a single PDF via email or as a bound physical copy delivered to the office in Burns Lake; fax submissions are strictly prohibited.

Regional District of Bulkley-Nechako

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Dental Claims and Member Data SystemsThe Dental Claims and Member Data Systems subcontract involves providing essential technology infrastructure for prime contractors working on Rhode Island EOHHS Medicaid projects. The selected provider is responsible for maintaining secure systems for electronic protected health information, managing the Provider Directory, and tracking quality KPIs. Key deliverables include the provision of operational data reports and the maintenance of a secure member portal, with a critical requirement for the systems to interface effectively with the Medicaid Management Information System. Strict adherence to regulatory standards is mandatory, including full compliance with the HITECH Act and HIPAA Privacy and Security Rules. This opportunity is issued by the State of Rhode Island under NAICS code 541512. Interested parties must submit their responses by the deadline of November 13, 2026.

State of Rhode Island

POSTED

about 12 hours ago

DEADLINE

DEMS Implementation and Integration SpecialistThis subcontract opportunity is for a DEMS Implementation and Integration Specialist to support prime contractors on digital evidence projects for the Iowa Department of Public Safety. The selected provider will be responsible for technical configuration and data migration, including the execution of integration planning and the establishment of metadata and hashing standards. A primary objective is the migration of legacy digital evidence into a centralized platform to ensure a fully integrated and configured system. The scope of work involves utilizing API integration tools and migration scripts to develop automated records-retention workflows. This project falls under NAICS code 541512. Interested parties should note that the solicitation was posted on October 16, 2026, with a response deadline of November 19, 2026.

POSTED

about 14 hours ago

DEADLINE

in about 1 month

Shipboard Electronics and Communications ModernizationThe Shipboard Electronics and Communications Modernization subcontract involves the installation and upgrading of C4I systems for prime contractors supporting NAVSUP Fleet Logistics Center Yokosuka CVN projects. The scope of work includes technical tasks such as antenna installation, server rack integration, fiber optic cabling, and system calibration to ensure the delivery of fully integrated and commissioned communication and electronic systems. This opportunity is categorized under NAICS code 541512 and is managed by the Department of Defense. Qualified personnel must possess electronics technician certifications and may be required to obtain security clearances. The response deadline for this requirement is October 31, 2026.

Navsup Flt Logistics Ctr Yokosuka

POSTED

about 14 hours ago

DEADLINE

Federal Systems Integration ServicesThe Federal Systems Integration Services subcontract focuses on performing technical integrations between SaaS platforms and U.S. Secret Service systems for prime contractors. The scope of work involves developing and configuring secure API connections, batch exchange mechanisms, and secure file transfers to link platforms with background investigation systems, testing vendors, and federal staffing tools. All deliverables must utilize API Gateways and SFTP while strictly adhering to Department of Homeland Security and U.S. Secret Service security and encryption standards. This opportunity is categorized under NAICS code 541512 and is based in Washington, D.C. The project is managed under the Department of Homeland Security for the U.S. Secret Service. Interested parties should note the response deadline of October 23, 2026.

U S Secret Service

POSTED

about 14 hours ago

DEADLINE

Food Management Systems Administration (IL5)This subcontract focuses on providing technical administration and cybersecurity support for prime contractors managing US Army dining facility projects at USAG Vilseck, Germany. The primary objective is to deliver and maintain a secure, operational automated food management system, specifically managing automated headcount and cashiering software. The project requires specialized expertise in AFMIS or equivalent Department of Defense food management systems to ensure full compliance with Department of War cybersecurity frameworks at Impact Level 5. Managed by the Department of Defense, the contract falls under NAICS code 541512 and requires a response by November 15, 2026.

0409 Aq Hq Contract

POSTED

about 14 hours ago

DEADLINE

Modernizing the Naval Enterprise Digital Environment

Solicitation # N6175027R0000

Portfolio Acquisition Executive Mission Systems, on behalf of the Naval Enterprise Networks (NEN) Program Office, has issued a special notice regarding the modernization of the Naval Enterprise Digital Environment. This initiative aims to create a resilient, adaptable, and interoperable digital ecosystem encompassing network, cloud, identity, computing, data, cybersecurity, and enterprise services. The environment is designed to support users across diverse conditions, including shore, remote, pierside, afloat, and expeditionary settings. The program is driven by five primary outcomes: ensuring reliable secure access, authorized access, productive digital work, availability and recovery, and continuous modernization. The strategic approach emphasizes a secure-by-design philosophy where cybersecurity, supply-chain risk, and resilience are treated as continuous lifecycle requirements. The government intends to leverage proven commercial products and business practices while maintaining authority over architecture, security boundaries, and the technical baseline. To ensure flexibility and evolution, the program mandates the use of clear interfaces, standards, and portable data. This notice is provided for general information and industry awareness; it does not constitute a request for proposal, a solicitation, or a commitment by the government to award a contract, and it does not require a response.

Pae Mission Systems

POSTED

about 14 hours ago

DEADLINE

ITSM Tool Selection and DeploymentThis subcontract opportunity involves the selection and deployment of an ITSM tool for prime contractors working on IT projects for Pakistan State Oil Company Ltd. The scope of work encompasses a full lifecycle implementation, including tool requirements analysis, software procurement, system configuration, and the automation of workflows. The selected provider will be responsible for integrating the new software platform with existing IT infrastructure to automate the overall ITSM framework. To ensure professional delivery, the contract requires the use of certified implementation partners for industry-standard platforms such as BMC or ServiceNow. The final deliverable is a fully configured and deployed ITSM software platform. Interested parties should note that the response deadline is October 30, 2026, and the project falls under NAICS code 541512.

Pakistan State Oil Company Ltd

POSTED

about 16 hours ago

DEADLINE

ITSM Process Design and ImplementationThis subcontract for ITSM Process Design and Implementation focuses on developing and executing operational processes for prime contractors supporting IT projects at Pakistan State Oil Company Ltd. The scope of work involves the design and documentation of critical IT service management frameworks, specifically targeting Incident Management, Problem Management, Change Enablement, Request Fulfillment, and Asset Management. To ensure quality delivery, the contract requires the involvement of Certified ITIL Process Practitioners. The primary deliverables for this engagement include comprehensive Process Definition Documents, Standard Operating Procedures, and detailed Process Maps. Interested parties must adhere to the timeline established by the posting date of October 16, 2026, with a response deadline set for October 30, 2026. The project falls under NAICS code 541512, emphasizing the technical nature of the computer systems design and implementation services required.

Pakistan State Oil Company Ltd

POSTED

about 16 hours ago

DEADLINE

More opportunities from Department Of Health And Human Services → Ofc Of Acquisition And Grants Management

Same awarding agency

Specialized Document Imaging and Mailroom ServicesThe Specialized Document Imaging and Mailroom Services subcontract, managed by the Department of Health and Human Services Office of Acquisition and Grants Management, focuses on document intake and digitization for prime contractors supporting CMS Medicare Appeals projects. The scope of work involves managing mailroom activities and executing high-volume scanning to create second-level electronic case files for the Medicare Appeals System. A critical requirement of this contract is strict adherence to HIPAA compliance to ensure the secure handling of Protected Health Information. The successful provider will be responsible for delivering digitized and indexed case files uploaded directly to the MAS. This opportunity falls under NAICS code 561613, with a response deadline set for November 5, 2026.

Armored Car Services

POSTED

DEADLINE

Statistical Sampling and Data AnalysisThis subcontract opportunity, titled Statistical Sampling and Data Analysis, is issued by the Department of Health and Human Services through the Office of Acquisition and Grants Management. The project focuses on providing specialized statistical analysis and extrapolation services for prime contractors working on CMS Medicare Appeals projects. The primary objective is to evaluate compliance with Medicare regulations according to CMS Ruling 86-1 by conducting independent error rate surveys and extrapolating appeals claims. The selected provider will be required to utilize statistical analysis software to process data and deliver comprehensive reports on their findings and error rate surveys. This opportunity falls under NAICS code 541690. Interested parties should note that the posting date is October 15, 2026, with a response deadline set for November 5, 2026.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Clinical Medical Review ServicesThis subcontract for Clinical Medical Review Services, managed by the Department of Health and Human Services Office of Acquisition and Grants Management, seeks licensed medical professionals to support CMS Medicare Appeals projects. The selected providers will perform clinical reviews of medical records to support adjudicative determinations regarding coverage and payment orders, utilizing CMS manuals and Local Coverage Determinations to deliver medical necessity justifications. Qualified candidates must hold valid US Medical Licenses to perform these specialized reviews for prime contractors. The opportunity was posted on October 15, 2026, with a response deadline of November 5, 2026. The project falls under NAICS code 621391.

Offices of Podiatrists

POSTED

DEADLINE

Medicare Claims Adjudication and Case ManagementThe Medicare Claims Adjudication and Case Management subcontract, issued by the Department of Health and Human Services Office of Acquisition and Grants Management, focuses on the adjudication of Medicare reconsiderations for prime contractors. The scope of work involves processing reconsiderations of initial determinations, adjudicating claims, and managing cases specifically within the Medicare Appeals System. Key operational requirements include performing electronic case management and document imaging to establish second-level electronic case files. The successful provider is responsible for delivering final adjudication decisions and ensuring all electronic case files are complete within the designated system. This opportunity falls under NAICS code 541990, with a response deadline of November 5, 2026.

All Other Professional, Scientific, and Technical Services

POSTED

DEADLINE

Request for Information - CMS' Qualified Independent Contractor (QIC) Program

Solicitation # RFICMSQIC2026

The Department of Health and Human Services, through the Centers for Medicare and Medicaid Services, is issuing a presolicitation Request for Information for its Qualified Independent Contractor (QIC) program. This Indefinite-Delivery/Indefinite-Quantity (IDIQ) contract, categorized under NAICS 541611, seeks vendors to perform functions integrated with the Medicare Program, including evaluating compliance with Medicare regulations via independent error rate surveys and providing accurate, timely reconsideration decisions. The total period of performance is not to exceed five years, beginning with a transition-in phase from July 14, 2026, to September 13, 2026, followed by a base operational period and four potential renewal periods ending July 13, 2031. Key requirements include obtaining an Authority to Operate (ATO) within six months of award and adhering to strict security and privacy standards, including NIST SP 800-53 and Executive Order 13556 for Controlled Unclassified Information. Contractors must provide annual Organizational Conflict of Interest statements and submit deliverables electronically via the CMS Analysis, Tracking and Reporting system. Performance is monitored through annual reviews focusing on compliance, quality, and efficiency, with award fee eligibility tied to achieving at least a satisfactory rating in the CPARS evaluation. Responses to this RFI are due by November 5, 2026, and must include general vendor information, a relevant experience summary, and responses to technical questions in Microsoft Word format.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Request for Information - Fraud Defense Contracts

Solicitation # 270536

The Centers for Medicare & Medicaid Services (CMS) has issued a Request for Information (RFI) under solicitation number 270536 to gather industry feedback and innovative solutions for its future Fraud Defense Contracts. The primary objective is to enhance Program Integrity (PI) efforts to combat fraud and abuse within federal health care programs, specifically Medicare and Medicaid. CMS is proposing a new operating model that increases its own role in lead development, prioritization, and the direction of investigations. The agency is seeking input on the use of advanced analytics, artificial intelligence, SQL, and open-source intelligence (OSINT) to identify problematic actors and develop defensible law enforcement referral packages and administrative actions, such as payment suspensions and revocations. Interested vendors must submit their responses using the designated Interested Vendor Response form by 11 AM EST on November 4, 2026. The scope of work involves collaborating with various entities, including the Department of Justice, FBI, and the HHS Office of Inspector General, while maintaining strict security, privacy, and evidentiary safeguards. CMS is particularly interested in feedback regarding fixed-price contracting structures and strategies to mitigate organizational conflicts of interest for firms with existing health plan or provider business. This RFI is for informational and planning purposes only, and no contract will be awarded based solely on the responses provided.

Investigation and Personal Background Check Services

POSTED

DEADLINE

Customer Support & Call Center OperationsThis subcontract opportunity, titled Customer Support and Call Center Operations, is issued by the Department of Health and Human Services under the Office of Acquisition and Grants Management. The project focuses on providing essential customer service and technical support for prime contractors working on CMS Medicare Administrative Contractor projects. The selected provider will be responsible for managing both inbound and outbound communications to resolve billing inquiries and offer expert guidance on Medicare benefit administration for both providers and beneficiaries. To successfully execute the contract, the provider must utilize call center management software and ensure all staff are thoroughly trained on Medicare policy. Key deliverables include the resolution of support tickets and the regular reporting of performance metrics. Interested parties should note that the response deadline is November 2, 2026, and the work falls under NAICS code 561110.

Office Administrative Services

POSTED

DEADLINE

Provider Enrollment & Credentialing ServicesThis subcontract opportunity, titled Provider Enrollment and Credentialing Services, involves supporting prime contractors on CMS Medicare Administrative Contractor projects within Jurisdiction 8. The selected provider will be responsible for the verification and enrollment of healthcare providers, which includes validating provider licenses, auditing National Provider Identifier data, and processing enrollment applications in strict accordance with CMS guidelines and established credentialing standards. The primary deliverable is the provision of fully verified and enrolled provider records. Managed by the Department of Health and Human Services under the Office of Acquisition and Grants Management, the project falls under NAICS code 541611. The solicitation was posted on October 6, 2026, with a response deadline set for November 2, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Cybersecurity & Data Privacy ComplianceThis subcontract opportunity, titled Cybersecurity and Data Privacy Compliance, is issued by the Department of Health and Human Services Office of Acquisition and Grants Management. The project focuses on providing continuous monitoring, security auditing, and threat detection for prime contractors working on CMS Medicare Administrative Contractor projects. The primary objective is to protect Protected Health Information and Personally Identifiable Information through vulnerability scanning, encryption management, and strict adherence to NIST and CMS security frameworks. Qualified providers must possess CISSP certifications and demonstrated experience with HHS and CMS security protocols to deliver required security audit reports and compliance certifications. Interested parties should note the response deadline of November 2, 2026, and the associated NAICS code 541519.

Other Computer Related Services

POSTED

DEADLINE

Healthcare IT Infrastructure & Cloud HostingThis subcontract opportunity, titled Healthcare IT Infrastructure and Cloud Hosting, is issued by the Department of Health and Human Services under the Office of Acquisition and Grants Management. The project focuses on providing and managing secure IT environments, database hosting, and cloud infrastructure to support prime contractors working on CMS Medicare Administrative Contractor projects. Key responsibilities include maintaining server uptime, managing data backups, and ensuring the scalability of systems used to handle sensitive beneficiary and provider data. To qualify, providers must maintain FedRAMP certification and ensure full HIPAA compliance. The scope of work requires the delivery of operational hosting environments and the regular submission of system availability reports. Interested parties should note the response deadline of November 2, 2026, and the associated NAICS code 541513.

Computer Facilities Management Services

POSTED

DEADLINE

Healthcare Claims Processing & Adjudication ServicesThe Healthcare Claims Processing and Adjudication Services subcontract, issued by the Department of Health and Human Services Office of Acquisition and Grants Management, focuses on the technical processing, adjudication, and payment of Medicare Part A and Part B claims. Supporting prime contractors on Medicare Administrative Contractor projects, the scope of work includes validating provider data, verifying claim eligibility, and applying specific Medicare payment rules to manage the payment cycle for fee-for-service providers. Successful execution of this contract requires specialized expertise in Medicare regulations and CMS claims processing systems to ensure the accurate delivery of adjudicated claims and processed payments. The opportunity is categorized under NAICS code 541611, with a response deadline set for November 2, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Medicare Administrative Contractor (MAC) Jurisdiction 8 (J8) - Final Solicitation

Solicitation # 75FCMC27R0001FinalSolicitation

The Department of Health and Human Services, through the Centers for Medicare & Medicaid Services, is soliciting proposals under solicitation number 75FCMC27R0001 for a Part A/Part B Medicare Administrative Contractor for Jurisdiction 8. This contractor will be responsible for providing health insurance benefit administration services, specifically Medicare claims processing and payment services, to support the traditional Medicare fee-for-service program within the states of Indiana and Michigan. The solicitation was posted on October 6, 2026, with a response deadline of November 2, 2026. The contract includes specific small business subcontracting requirements that offerors are expected to meet. These include a goal where at least 5 percent of the total contract value is awarded to small businesses, and a separate goal requiring that 25 percent of all subcontracting dollars go to small businesses, which includes a 3 percent component goal for HUBZone small businesses. Offerors must utilize the Health and Human Services Small Business Customer Experience portal for entering these goals. Primary points of contact for this procurement are Contracting Officer Mark Smolenski and Contract Specialist Alyssa Jones.

Direct Health and Medical Insurance Carriers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS