Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance and ATO Support

Active

Federal

Response Deadline10/26/2026, 01:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Homeland Security → Information Technology Division

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Washington, DC, 20024, USA

Set-Aside

NONE

Documents

This scope was carved out of RFI-FY27-SI-Powered_Communications_Video_Intelligence.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFI-FY27-SI Powered Communications and Video Intelligence

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 9

subcontract

Response DeadlineOct 26

Submission deadline

Response Deadline

10/26/2026, 01:00:00 PM UTCin 14 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Homeland Security → Information Technology Division

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Homeland Security → Information Technology Division

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security authorization processes for prime contractors on DHS ICE intelligence projects. Authors Security Plans, Contingency Plans, and Security Assessment Plans using the Security Requirements Traceability Matrix. Ensures compliance with DHS Policy Directive 4300A and RMF standards. Requires Top Secret or Secret clearance. Delivers a completed SA Package and signed Authority to Operate (ATO) letter.

Similar Contracts

Same NAICS industry code

LIPTM00417__ENI IPT_NEW TO (FOE)_EXP ISR SUPT_N6523620F3023_SRC_CPFFScientific Research Corporation is awarded a new task order under the Naval Information Warfare Systems agency, specifically through Niwc Atlantic. This contract, identified as a bridge to N6523619D4809, focuses on providing expanded ISR support for the ENI IPT. The work is classified under NAICS code 541690 and utilizes a cost-plus-fixed-fee contract type. The performance of this contract will take place in North Charleston. Administrative oversight is managed by Contracting Officer Lisa R. Matthews and Secondary Point of Contact Shanicqua N. Middleton. The project is listed as a forecast with a posted date of October 11, 2026.

POSTED

DEADLINE

Digital Forensics and Incident Response (DFIR)This subcontract for Digital Forensics and Incident Response supports prime contractors on California Department of State Hospitals projects by providing deep-dive investigations into security breaches. The selected provider will identify the causes of improper data acquisition, determine if triggers for California Civil Code 1798.29 and 1798.82 have been met, and develop comprehensive corrective action plans to contain breaches. Due to the nature of the work, specialized expertise in HIPAA and CCPA regulations is required. The contractor is responsible for delivering detailed written breach investigation reports within 10 working days. This opportunity is categorized under NAICS code 541690 and is associated with the state of California. Interested parties should note the response deadline of October 23, 2026.

California Department of State Hospitals

POSTED

DEADLINE

Independent Cost Estimator / Quantity SurveyorThis subcontract opportunity with Civida is for an Independent Cost Estimator or Quantity Surveyor to provide pricing validation and elemental cost estimates for affordable row housing projects. The selected professional will be responsible for analyzing Class B, C, and D cost estimates and performing value engineering to ensure project costs remain aligned with approved budgets through the use of specialized cost estimation software. Qualified candidates must hold a Quantity Surveyor designation or be a Certified Cost Professional. Key deliverables for the contract include the submission of detailed elemental cost estimates and comprehensive value engineering reports. The response deadline for this solicitation is November 6, 2026.

POSTED

DEADLINE

Door Hardware ConsultantThe Region of Peel is seeking a Door Hardware Consultant for a subcontracting role to support police facility renovation projects. The selected consultant will be responsible for providing specialized hardware specifications and detailed door-hardware schedules to prime contractors, while offering expert advice on security solutions tailored to meet specific police operational requirements. Qualified candidates must possess extensive expertise in commercial and institutional security hardware and be able to obtain the necessary police security clearance. The primary deliverables for this engagement include comprehensive technical recommendations and a detailed door-hardware schedule. Responses for this opportunity are due by November 3, 2026.

POSTED

DEADLINE

Tijuana River Valley Chemical Pollution Impact Investigation: Retrospective Epidemiological Study

Solicitation # 13417

The County of San Diego Public Health Services is soliciting quotes for RFQ 13417 to design, implement, and conduct a Retrospective Epidemiological Study as part of the Tijuana River Valley Chemical Pollution Impact Investigation. The primary objective is to assess health effects resulting from past emissions in the Tijuana River Valley by defining geographic exposure zones, linking de-identified hospital, cancer, and mortality data, and evaluating historical health outcomes over a look-back period of at least 10 years. The anticipated contract term is an initial base period of 15 months, with performance focused on San Diego County. The County will award the contract based on best value, evaluating technical merit, experience, capacity, compliance history, availability, and price, while also considering cultural competency and sustainability. Required deliverables include a Quality Assurance/Quality Control plan due within 120 days of execution and final processed data in approved formats. Contractors must comply with HIPAA, California state confidentiality laws, and the County's Trauma-Informed System. Proposals must be submitted via BuyNet by October 30, 2026, and must include specific required forms, a technical exhibit, and a firm fixed price payment schedule.

County of San Diego

POSTED

DEADLINE

Healthcare Cybersecurity Compliance ConsultantThe Healthcare Cybersecurity Compliance Consultant subcontract involves performing security validation and compliance auditing for prime contractors working on Central Texas Community Health Center projects. The scope of work focuses on validating safeguards against data exfiltration and insider threats, auditing role-based access controls, and ensuring strict adherence to HIPAA, SOC II, and NIST frameworks for data both at rest and in transit. The successful provider will be responsible for delivering comprehensive security validation reports and official compliance certifications. Qualified candidates must hold CISSP or CISA certifications to meet the technical requirements of the role. This opportunity is categorized under NAICS code 541690 and was posted on October 9, 2026, with a response deadline of November 9, 2026. Interested parties can find further details through the Texas SmartBuy portal under solicitation RFP2026-09-001.

CENTRAL TEXAS COMMUNITY HEALTH CENTER

POSTED

DEADLINE

Third-Party Security Assessment & Compliance AuditorThe Third-Party Security Assessment and Compliance Auditor subcontract for Norfolk County involves providing independent security validation and penetration testing for prime contractors working on municipal projects. The selected provider will utilize specialized toolsets to audit environments for SOC 2 Type II and ISO 27001 alignment, while also verifying PCI DSS compliance for payment gateways. The primary deliverables include formal compliance certification audits and detailed independent penetration test reports. This opportunity is categorized under NAICS code 541690 and was posted on October 9, 2026. Interested parties must submit their responses by the deadline of November 3, 2026. The contract is managed by Norfolk County and focuses on ensuring rigorous security standards across its municipal infrastructure and payment systems.

POSTED

DEADLINE

Regional Demographic and Geographic AnalystThe Region of Waterloo is seeking a Regional Demographic and Geographic Analyst for a subcontracting role to support prime contractors on strategic planning projects. The selected provider will be responsible for conducting targeted demographic and geographic analyses, utilizing regional census data and specialized modeling software to evaluate how local and global trends affect diverse population groups and Area Municipalities. The primary deliverable for this engagement is a comprehensive Geographic and Demographic impact analysis that will be integrated into the final strategic report. Interested parties must submit their responses by October 30, 2026, in accordance with the solicitation posted on October 9, 2026, under NAICS code 541690.

Region of Waterloo

POSTED

DEADLINE

Economic Methodologist & Data Scientist

Department Of Commerce Noaa

POSTED

DEADLINE

R--Technical Services Support

Solicitation # 89243126RSC000172

The Department of Energy Office of Science is soliciting a single contractor to provide comprehensive technical security support services in Oak Ridge, Tennessee. This 8(a) set-aside contract, under NAICS code 541690, supports the Office of Safety and Security, the Office of Science Consolidated Service Center, and the Oak Ridge Office of Environmental Management. The primary mission is to implement and administer Safeguards and Security programs to protect critical national security assets, including personnel, information, and Category I-IV Special Nuclear Material. The scope of work encompasses personnel security, industrial security, information security, and general program support, with a specific requirement to administer the personal identity verification and credentialing program under Homeland Security Presidential Directive-12. The contractor is required to provide experienced management, including a Program Manager designated as Key Personnel, and must implement a comprehensive Quality Control Plan subject to government review and approval. All personnel must obtain and maintain appropriate access authorizations and adhere to strict protocols for handling classified information and Controlled Unclassified Information, such as UCNI, ECI, PII, and OUO. Performance must comply with all applicable DOE directives and federal, state, and local laws. The contractor is also responsible for maintaining a federally mandated Worker Safety and Health Program and providing regular activity reports to the Contracting Officer's Representative.

Sc Oak Ridge Office

POSTED

DEADLINE

FY27 - EXPERT REVIEW BOARS

Solicitation # FY27-EXPERT-REVIEW-BOARDS

The Department of Agriculture, through the Risk Management Agency (RMA), is issuing a Sources Sought Notice to identify qualified private sector entities for addition to a general pool of Blanket Purchase Agreements (BPAs). The objective is to secure independent reviewers with specialized expertise as actuaries or underwriters to evaluate insurance policies, plans of insurance, and related modifications. These services are critical for ensuring the proper functioning of insurance programs and include providing actuarial services related to loss adjustment and rating plans, all performed in accordance with the Federal Crop Insurance Act and relevant statutory authorities under 7 USC Chapter 36 and 7 USC 1508. Interested respondents must demonstrate technical competence in financial implications of future contingent events for actuarial roles, or experience in insurance policy design and risk classification for underwriting roles. Submissions must include basic company information such as CAGE Code, SAM UEI number, and active SAM status, along with a detailed capability statement and identification of business size and socioeconomic category. Responses are due by September 30, 2027, and should be submitted via email to the designated Contract Specialist and Contracting Officer. This effort is categorized under NAICS code 541690 and is managed by the Fpac Bus Cntr-Acq Division in Washington, DC.

Fpac Bus Cntr-Acq Division

POSTED

DEADLINE

(607) Water Staining Testing at the William S. Middleton Memorial Veterans Hospital

Solicitation # 36C25227AP0497

The Department of Veterans Affairs Great Lakes Acquisition Center intends to award a sole source, firm fixed price contract to Phigenics, LLC for Performance Qualification validation testing at the William S. Middleton Memorial Veterans Hospital in Madison, Wisconsin. The scope of work includes providing all necessary resources for ST108 critical and utility water chemistry panels, microbiological analysis, shipping, laboratory testing, and reporting under NAICS code 541690. This procurement is being conducted under the authority of 41 U.S.C. 1901 simplified acquisition procedures. While the government intends to negotiate exclusively with Phigenics, LLC, other firms may submit capability statements and supporting evidence of their ability to meet the requirements to the Contract Specialist by October 14, 2026, at 10:00 AM CST. The final decision to compete the procurement remains at the sole discretion of the government.

252-NETWORK Contract Office 12 (36C252)

POSTED

DEADLINE

More opportunities from Department Of Homeland Security → Information Technology Division

Same awarding agency

COTS Software Supply

Software Publishers

POSTED

DEADLINE

Systems Integration and API Development

Computer Systems Design Services

POSTED

DEADLINE

Cloud Service Provider (CSP) / Hosting Services

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

SI Model Development and Training Services

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Industry Day for Outcome-Based Rapid Business Integration and Technology (ORBIT) Multiple Award (MA) Indefinite Delivery, Indefinite Quantity (IDIQ)

Solicitation # ORBIT-MA-IDIQ

The Department of Homeland Security, Immigration and Customs Enforcement is hosting an Industry Day on October 29, 2026, for the Outcome-Based Rapid Business Integration and Technology (ORBIT) IDIQ. Formerly known as SWIFT, ORBIT is a rebranded enterprise vehicle designed to shift from siloed, platform-specific tasking to an integrated framework focused on continuous assembly and improvement of technical capabilities. The program emphasizes outcome-based delivery through dynamic SLAs and organizes work into functional streams, including Mission Platforms, Super Intelligence/Automation, Enterprise Data, Digital Experience, and Portfolio Integration, while maintaining continuity for existing operations and maintenance. This event is for planning purposes only and does not constitute a formal solicitation or a commitment to award a contract. The Industry Day will be held both virtually via Microsoft Teams and in-person in Arlington, Virginia, with in-person attendance limited to the first 50 registered companies. Interested parties must register through the provided links, and confirmation of registration status will be sent by October 22, 2026.

Computer Systems Design Services

POSTED

DEADLINE

RFI-FY27-SI Powered Communications and Video Intelligence

Solicitation # RFI-FY27-SI-Powered_Communications_Video_Intelligence

The Department of Homeland Security, through Immigration and Customs Enforcement (ICE) and its Information Technology Division, is seeking information for an Integrated SI-Powered Detention Communications and Video Intelligence Suite. This sources-sought effort, categorized under NAICS 541519, encompasses a comprehensive range of services including software licenses and subscriptions, implementation, integration, configuration, testing, training, cybersecurity support, operations and maintenance, and transition services. The project aims to enhance national security and public safety by leveraging industry-standard APIs and protocols to ensure interoperability within DHS systems. The requirement emphasizes rigorous security and operational standards, mandating the safeguarding of Controlled Unclassified Information (CUI) and the attainment of an Authority to Operate (ATO). Contractors must adhere to strict cybersecurity protocols, including continuous monitoring of SI systems for anomalies or biases and the use of tamper-proof packaging for all shipments. Performance will be validated through government-observed demonstrations, functional tests, and end-to-end integration scenarios. Administrative requirements include rapid incident reporting to the Contracting Officer's Representative, with specific timelines for PII breaches and data unavailability. RFI questions are due by October 16, 2026, with final responses required by October 26, 2026.

Other Computer Related Services

POSTED

DEADLINE

Workforce Enablement & AI TrainingThe Workforce Enablement and AI Training subcontract, managed by the Department of Homeland Security Information Technology Division, focuses on equipping prime contractors on ICE projects with the necessary skills to utilize artificial intelligence tools. The scope of work includes the administration of the AI and Innovation Hub and the creation of comprehensive support materials such as standard operating procedures, micro-learnings, and video guides. A critical component of the initiative is training mission teams on agentic capabilities and autonomy boundaries to ensure the safe and effective deployment of AI. All deliverables, including training modules and documentation, must maintain strict Section 508 compliance. The contract requires the delivery of certified trained personnel and a structured suite of educational resources to ensure workforce readiness. Performance for this effort is centered in Washington, with a response deadline set for October 16, 2026.

Professional and Management Development Training

POSTED

DEADLINE

AI Governance, Risk, and Compliance (GRC)The AI Governance, Risk, and Compliance (GRC) subcontract supports the Department of Homeland Security's Information Technology Division by coordinating AI governance and responsible policy adherence for prime contractors on ICE projects. The scope of work involves developing AI policies, tracking remediation findings, and ensuring strict compliance with the NIST AI RMF, Section 508, and CISA Zero Trust principles. Operating out of Washington, the contractor will utilize AI audit logs and governance tracking tools to generate compliance reports, remediation plans, and briefings for leadership. This effort focuses on maintaining high standards of accountability and risk management across AI implementations within the agency.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

IT Financial Management & Telemetry (TBM)The IT Financial Management and Telemetry subcontract supports the Department of Homeland Security's Information Technology Division by managing IT chargeback models and cost-to-serve reporting for prime contractors on ICE projects. The scope of work involves sustaining the IT Chargeback Operating Model and utilizing Power BI to manage IBM Spend Dashboards. The contractor is responsible for developing methodologies to capture metering units, rate limits, and observability costs aligned with TBM standards and unit-cost economics. Key deliverables include the production of comprehensive cost-to-serve reports and telemetry dashboards to ensure financial transparency and operational efficiency. This effort is categorized under NAICS code 541211 and is based in Washington.

Offices of Certified Public Accountants

POSTED

DEADLINE

Enterprise Architecture (EA) & Technology StrategyThis subcontract opportunity, titled Enterprise Architecture (EA) and Technology Strategy, supports prime contractors on Department of Homeland Security ICE projects within the Information Technology Division. The scope of work focuses on providing strategic technology roadmapping and EA governance, utilizing an AI-driven practice to create integrated roadmaps for cloud services, AI platforms, and DevOps tooling. Key deliverables include reference architectures, EA playbooks, and the execution of portfolio rationalization. The selected provider must ensure all technical standards align with DHS directives, OMB guidance, and NIST SP800-218. Performance will take place in Washington, and the contract falls under NAICS code 541611. Interested parties should note the response deadline of October 16, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Data Engineering & Lakehouse ManagementThis subcontract opportunity, titled Data Engineering and Lakehouse Management, supports the Department of Homeland Security's Information Technology Division for projects involving ICE. The scope of work focuses on performing data pipeline engineering and managing the enterprise data lakehouse for prime contractors. Key responsibilities include engineering automated ingestion pipelines for new enterprise data sources and operating a Data Strike Team dedicated to external data curation and the integration of legacy systems using CORE/TBM Collibra. The project requires strict adherence to governance processes and secure data-sharing patterns to deliver curated data products and automated pipelines. Performance will take place in Washington, and the contract falls under NAICS code 541512. Interested parties should note the response deadline of October 16, 2026.

Computer Systems Design Services

POSTED

DEADLINE

AI Application Development & EngineeringThis subcontract for AI Application Development and Engineering supports the Department of Homeland Security's Information Technology Division, specifically focusing on the STELLA Application Portfolio for ICE projects. The scope of work involves the engineering and deployment of new AI applications, the implementation of agentic capabilities, and the creation of orchestration and runtime layers for the Agentic Software Factory utilizing Retrieval-Augmented Generation architectures. The project requires strict adherence to federal security and AI standards, including the NIST AI Risk Management Framework, the Generative AI Profile, and CISA Zero Trust guidance. Based in Washington, the primary deliverables include fully deployed AI applications and functional agentic orchestration layers.

Custom Computer Programming Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS