Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance & ATO Support

Active

Federal

Response Deadline09/21/2026, 01:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity Compliance and ATO Support subcontract focuses on providing security categorization and documentation for prime contractors working on HHS ORR projects to secure an Authority to Operate. The scope of work involves determining risk levels based on FIPS 199 and NIST SP 800-60, implementing controls according to NIST SP 800-53, and managing the System Security Plan and Plan of Action and Milestones. Utilizing the NIST Risk Management Framework, the contractor is responsible for delivering an approved SSP and final ATO certification. This effort is managed under the Department of Health and Human Services Omas Strategic Buying Center with a NAICS code of 541519.

General Info

Subcontract providing security documentation and NIST compliance to secure HHS ORR ATO certification.

Agency

Department Of Health And Human Services → Omas Strategic Buying Center - HHS MissionView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

MD

Set-Aside

NONE

Documents

This scope was carved out of 7571MN26Q00111.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

ORR Process and Technology Modernization (OPTM) Platform and Home Studies/Post-Release Services (HS/PRS) Application Enhancement and Support

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 15

subcontract

Response DeadlineSep 21

Submission deadline

Response Deadline

09/21/2026, 01:00:00 PM UTCin 5 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Health And Human Services → Omas Strategic Buying Center - HHS Mission

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Health And Human Services → Omas Strategic Buying Center - HHS Mission

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security categorization and documentation for prime contractors on HHS ORR projects to achieve Authority to Operate (ATO). Determines risk levels per FIPS 199 and NIST SP 800-60, implements controls per NIST SP 800-53, and manages the System Security Plan (SSP) and POA&M. Utilizes NIST Risk Management Framework (RMF). Delivers approved SSP and ATO certification.

Similar Contracts

Same NAICS industry code

IT Security & Compliance AuditingThis subcontract for IT Security and Compliance Auditing, managed by California Procurement Services, focuses on performing security validation for prime contractors involved in SFO SaaS projects. The primary objective is to ensure strict compliance with airport and federal data protection standards by validating cloud tenancy security and protecting City Data and Confidential Information. The scope includes preventing disabling code entry and utilizing security scanning and vulnerability management tools to adhere to PII and health information laws. The selected provider will be responsible for delivering detailed security validation reports to confirm all standards are met. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 10, 2026.

Procurement Services

POSTED

about 12 hours ago

DEADLINE

in about 2 months

Microsoft Unified Support Subscription Provider

F&A-IS Administration

POSTED

about 18 hours ago

DEADLINE

Fairfax Software Maintenance and Support

Solicitation # FLHSMV-SS-008-27

The Florida Department of Highway Safety and Motor Vehicles intends to enter into a single source purchase agreement with Fairfax Software for maintenance and support services. This action is identified under solicitation number FLHSMV-SS-008-27 and is not a request for bids or proposals. The notice was posted on September 15, 2026, with a response deadline of October 6, 2026. The contract will be performed within the state of Florida, and Alma Sanchez serves as the primary point of contact for this procurement.

Department of Highway Safety and Motor Vehicles

POSTED

about 19 hours ago

DEADLINE

Enterprise Content Management (ECM) Maintenance

Solicitation # 28291

The Washington State Department of Enterprise Services is conducting a competitive procurement process under solicitation 12625 to establish statewide contracts for Enterprise Content Management maintenance. This initiative allows eligible purchasers to acquire ongoing software maintenance and subscription options for existing ECM solutions, specifically divided into two categories: Open Text Maintenance and Laserfiche Maintenance. The contract covers a wide range of commodity codes including business, architectural, and integrated software, as well as data storage and updating services. The solicitation was posted on September 15, 2026, with a final deadline for bid submissions on October 10, 2026. A pre-bid conference is scheduled for September 23, 2026, via Microsoft Teams. Interested vendors must be registered in Washington’s Electronic Business Solution to receive updates and submit bids. All inquiries regarding the procurement should be directed to the Procurement Coordinator, Leilani Konecny, by the question deadline of October 5, 2026.

Department of Enterprise Services

POSTED

about 19 hours ago

DEADLINE

Cybersecurity & Compliance AuditorThis subcontract for a Cybersecurity and Compliance Auditor involves performing security reviews and penetration testing for prime contractors on Ohio EPA projects. The scope of work includes conducting configuration reviews for operating systems, applications, and databases, executing bi-weekly log anomaly reports, and maintaining the System Security Plan. The contractor must ensure strict adherence to NIST 800-53, NIST 800-171, CJIS Security Policy, and IRS Special Publication 1075. Key deliverables include security audit reports, risk assessments, and compliance certifications. The opportunity is categorized under NAICS code 541519 and is associated with the EPA PM-ITS Info Tech Service and PM-Fiscal Administration units.

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

POSTED

about 20 hours ago

DEADLINE

Cybersecurity & Year 1 SustainmentThis small business set-aside subcontract focuses on providing cybersecurity compliance and first-year technical sustainment for prime contractors supporting US Space Force projects at Patrick SFB and Cape Canaveral. The scope of work includes the implementation of cybersecurity controls, the delivery of Risk Management Framework packages, and adherence to FIPS 140-3 and OS Hardening standards. The contract ensures the delivery of a comprehensive Cybersecurity/RMF package along with twelve months of sustainment, which encompasses Year 1 warranty and Advanced Plus Services support. Managed under the Department of Defense, the performance of these services is centered at Patrick AFB.

FA2521 45 Cons Pk

POSTED

about 24 hours ago

DEADLINE

Grammarly Business Enterprise Software SupplyThis subcontract provides brand-name Grammarly Business Enterprise licenses to prime contractors supporting Indian Health Service projects. The scope includes the provision of online writing assistance software tools and the management of license seats for a base year and four subsequent option years. To be eligible, providers must hold Grammarly Authorized Reseller status and meet strict security requirements, including FedRAMP authorization and SOC 2 Type II audit results. Managed by the Department of Health and Human Services under the Division of Acquisitions Policy HQ, the contract is set aside for Indian Small Business Economic Enterprise firms under NAICS code 541519. The performance location is based in Rockville, Maryland. The primary objective is the delivery of active, provisioned software licenses to ensure IHS users have access to professional writing tools.

Division Of Acquisitions Policy Hq

POSTED

about 24 hours ago

DEADLINE

oKtopure Instrument Software Management

Usda/rd/regional Acq Division

POSTED

about 24 hours ago

DEADLINE

Software Support for KASEMAKE and KASECUT LicensesThis subcontract through the National Archives and Records Administration provides software support and license maintenance for prime contractors managing industrial equipment projects in College Park. The scope of work includes troubleshooting, updates, and ensuring the validity of two KASEMAKE and two KASECUT software licenses for a one-year duration. Eligible providers must demonstrate OEM authorization or provide proof of their ability to support these specific systems. The successful contractor is responsible for delivering active software support agreements and fully functional licenses under NAICS code 541519.

Nara Contracting Office

POSTED

about 24 hours ago

DEADLINE

Medical Billing System Help Desk & Customer SupportThis subcontract for the Indian Health Service under the Department of Health and Human Services involves providing technical customer support and help desk services for medical claims billing systems. Based in Portland, the contractor will assist users with claim corrections and resubmissions from 8:00 AM to 7:00 PM PT, Monday through Friday. The role requires the use of CRM and remote support tools, as well as the delivery of ongoing technical support and training documentation. Qualified providers must possess knowledge of medical coding standards and complete mandatory HIPAA privacy training. The opportunity falls under NAICS code 541519 and was posted on September 15, 2026, with a response deadline of September 17, 2026.

Indian Health Service

POSTED

about 24 hours ago

DEADLINE

in about 12 hours

Cybersecurity Accreditation & Implementation

Navfacsyscom Southwest

POSTED

about 24 hours ago

DEADLINE

ISBEE: Brand Name-Grammarly Business Enterprise (Base + 4)

Solicitation # 75H70426Q00025

The Indian Health Service (IHS) is conducting a sources sought notice under the authority of the Buy Indian Act, 25 U.S.C. 47, to identify qualified Indian Small Business Economic Enterprises (ISBEEs) and other Indian Economic Enterprises (IEEs) capable of providing Grammarly Business Enterprise (Part Number GRMLYENT-200), a cloud-based writing assistance software tool, for approximately 600 employees across IHS facilities. This notice is not a solicitation for proposals but a market research initiative to assess the availability and capability of small Indian-owned businesses to fulfill this requirement, with the intent to potentially structure a future acquisition using a set-aside reserved exclusively for ISBEEs. Interested parties must submit a complete response by 11:00 a.m. EST on May 11, 2026, to Javier.medina-velazquez@ihs.gov, including their company name, address, Unique Entity ID and CAGE code, point of contact, size classification under NAICS code 541519 (150-employee size standard), a capability statement, and a signed Buy Indian Act Indian Economic Enterprise Representation Form. Responses are restricted to five pages total and must not include proprietary, classified, or sensitive information, as the government reserves the right to use non-proprietary details in any future solicitation without obligation to compensate respondents. The requirement involves licensing Grammarly Business Enterprise, with baseline authorization for 600 users in the base year and anticipated increases of 80 users annually across four option years, extending the potential contract period through June 14, 2031. Performance is entirely electronic, with no physical delivery, and all services must be accessed via secure online platforms. Compliance with federal cybersecurity and privacy standards is mandatory, including adherence to FedRAMP Moderate authorization, HIPAA, the Privacy Act, FISMA, NIST SP 800-53, and SOC 2 Type II certification. Contractors must execute a Business Associate Agreement, prevent the input of protected health information, ensure data remains under IHS ownership with no secondary use, implement SCIM for identity provisioning, enable BYOK and Confidential Mode, and provide annual compliance reporting. Any data breach must be reported within 24 hours. The contracting officer is Javier Medina-Velazquez, with Kevin Fulbright serving as the technical point of contact. The government will not acknowledge receipt, guarantee an award, or pay for submissions

Division Of Acquisitions Policy Hq

POSTED

about 24 hours ago

DEADLINE

More opportunities from Department Of Health And Human Services → Omas Strategic Buying Center - HHS Mission

Same awarding agency

Disaster Recovery (DR) & Continuity of Operations (COOP)This subcontract under the Department of Health and Human Services Omas Strategic Buying Center focuses on establishing and testing disaster recovery and continuity of operations capabilities for prime contractors on HHS ORR OPTM platform projects. The scope of work includes managing geographically separate hosting facilities, executing periodic disaster recovery and annual failover tests, and maintaining detailed system backup and recovery documentation. The selected provider must ensure all activities align with the Authority to Operate and System Security Plan, delivering critical outputs such as Disaster Recovery Test Reports and a comprehensive Continuity of Operations Plan. This opportunity falls under NAICS code 541513 and requires a response by September 21, 2026.

Computer Facilities Management Services

POSTED

about 24 hours ago

DEADLINE

IT Help Desk & Application SupportThis subcontract opportunity with the Department of Health and Human Services Omas Strategic Buying Center focuses on providing Tier 1 and 2 technical support and maintenance for prime contractors managing HHS ORR HS/PRS applications. The scope of work includes help desk operations, software upgrades, production troubleshooting, and user access management utilizing remote support tools and ticketing systems. The primary objectives are to maintain strict Service Level Agreements, ensure consistent application uptime, and deliver the resolution of support tickets. This requirement falls under NAICS code 541513 and was posted on September 15, 2026, with a response deadline of September 21, 2026.

Computer Facilities Management Services

POSTED

about 24 hours ago

DEADLINE

Section 508 Accessibility Testing & RemediationThis subcontract opportunity with the Department of Health and Human Services Omas Strategic Buying Center focuses on providing Section 508 accessibility testing and remediation for software projects within the Office of Refugee Resettlement. The selected provider will perform comprehensive accessibility audits by testing applications against Web Content Accessibility Guidelines using specialized tools such as screen readers and contrast checkers to ensure full compliance. The primary deliverables for this engagement include the production of Voluntary Product Accessibility Templates and Accessibility Conformance Reports. Additionally, the contractor is responsible for delivering remediated, accessible user interfaces to ensure all software meets federal accessibility standards. This requirement falls under NAICS code 541511 and was posted on September 15, 2026, with a response deadline of September 21, 2026.

Custom Computer Programming Services

POSTED

about 24 hours ago

DEADLINE

Cloud Infrastructure Operations & Maintenance (AWS)This subcontract for Cloud Infrastructure Operations and Maintenance (AWS) supports prime contractors on HHS ORR OPTM platform projects under the Department of Health and Human Services. The scope of work involves comprehensive infrastructure management and network monitoring, specifically focusing on managing AWS cloud environments, server configuration, the implementation of managed firewall services, and the establishment of secure remote access via VPNs. A primary objective of the contract is to ensure that all COTS software maintains FedRAMP compliance while delivering a stable, optimized, and monitored cloud hosting environment. Classified under NAICS code 541513, the opportunity was posted on September 15, 2026, with a response deadline of September 21, 2026.

Computer Facilities Management Services

POSTED

about 24 hours ago

DEADLINE

Agile Software Development (HS/PRS Applications)This subcontract for Agile Software Development supports the Department of Health and Human Services within the Omas Strategic Buying Center, specifically focusing on projects for the Office of Refugee Resettlement. The scope of work involves full-stack agile development to design and implement new functionality from product backlogs, enhance existing features through modern design principles, and establish API connections to ORR platforms. Technical execution relies on agile delivery frameworks and CI/CD pipelines to provide updated application code and improved production software. The opportunity is categorized under NAICS code 541511 and was posted on September 15, 2026, with a response deadline of September 21, 2026. This engagement requires the contractor to act as a subcontractor to prime contractors to ensure the delivery of high-quality software enhancements for critical HHS mission applications.

Custom Computer Programming Services

POSTED

about 24 hours ago

DEADLINE

Managed Market Surveyor Data Suite

Solicitation # HHS-OMAS-26-NOI-7571MN26Q00110

The Department of Health and Human Services Office of Mission Acquisition Solutions intends to award a sole source contract to Clarivate Analytics LLC for the Managed Market Surveyor Data Suite. This requirement supports the Assistant Secretary for Planning and Evaluation in fulfilling a mandate from the Consolidated Appropriations Act of 2020 to study the effects of the No Surprises Act on healthcare costs, access, and market integration. The contract focuses on acquiring detailed enrollment data for commercial, Medicaid, Medicare, and Medicare Advantage plans across all U.S. counties for 2026. This data must include parent-organization and ownership hierarchies to allow the government to calculate insurer market shares and Herfindahl-Hirschman Index values for various geographic and product markets. While the government intends to award directly to Clarivate Analytics LLC, other responsible sources may submit capability statements by September 18, 2026.

Web Search Portals and All Other Information Services

POSTED

about 24 hours ago

DEADLINE

ORR Process and Technology Modernization (OPTM) Platform and Home Studies/Post-Release Services (HS/PRS) Application Enhancement and Support

Solicitation # 7571MN26Q00111

Computer Systems Design Services

POSTED

about 24 hours ago

DEADLINE

Healthcare M and D Deal Data Purchase

Solicitation # 7571MN26Q00106

The Department of Health and Human Services intends to negotiate a sole source contract with Irving Levin Associates, LLC to purchase comprehensive healthcare merger and acquisition data. This data, specifically the LevinPro HC M&A and LevinPro LTC datasets, will be used by the Assistant Secretary for Planning and Evaluation to analyze trends across various healthcare sectors and long term care. This information is critical for producing reports required under Section 201 of the No Surprises Act, with a particular focus on whether specialties such as radiology, anesthesiology, and emergency medicine are experiencing accelerated M&A activity. The government is soliciting capability statements from any responsible sources by September 18, 2026, to determine if a competitive procurement is necessary under FAR 13.501. Interested parties should submit their statements to the contracting officer, Anne Mineweaser. This notice serves as a preliminary step to assess available alternatives and does not obligate the government to award a contract or provide feedback to respondents.

Web Search Portals and All Other Information Services

POSTED

about 24 hours ago

DEADLINE

150th Anniversary journal for Public Health Reports

Solicitation # 7571MN26Q00102

The Department of Health and Human Services intends to negotiate a sole source contract with the Association of the Schools and Programs of Public Health to provide publishing, editorial, and dissemination support for Public Health Reports. This peer-reviewed journal serves as a critical forum for disseminating public health research, policy, and perspectives. The scope of work includes open access publishing support, creative and graphic services, expanded peer-review management, and specific activities related to the journal's 150th anniversary and the USPHS Scientific and Training Symposium. Under the authority of FAR 13.501, the government is seeking capability statements from any responsible sources who believe they can provide these services. Interested parties must submit their statements to the contracting officer by September 16, 2026. The government will use the submitted information to determine whether to proceed with a sole source award or conduct a competitive procurement.

Periodical Publishers

POSTED

DEADLINE

in about 8 hours

E-Commerce Portal Development & MaintenanceThis subcontract with the Department of Health and Human Services Omas Strategic Buying Center involves the development and maintenance of a secure web-based ordering portal for prime contractors on Federal Occupational Health projects. The project focuses on creating user interfaces, implementing access controls, and building reporting tools for expiration tracking and stock levels using cloud hosting and database management systems. The contractor is responsible for ensuring full cybersecurity compliance and the implementation of an Incident Response Plan to maintain system availability. Performance will take place in Rockville, Maryland, under NAICS code 541511, with the ultimate goal of delivering a fully operational e-commerce portal that meets specific system availability metrics.

Custom Computer Programming Services

POSTED

DEADLINE

Cold-Chain Logistics & Specialized DistributionThis subcontract for Cold-Chain Logistics and Specialized Distribution supports prime contractors on HHS Federal Occupational Health projects. The scope of work involves the temperature-controlled shipping and handling of vaccines and sensitive medications, utilizing refrigerated transport, specialized containers, and monitoring devices to ensure pharmaceutical stability. The Department of Health and Human Services Omas Strategic Buying Center is the overseeing agency, with performance centered in Rockville, ZIP code 20857. To qualify, providers must maintain Cold-chain management standard operating procedures and hold the necessary temperature-controlled shipping certifications. The opportunity is listed under NAICS code 484220, with a response deadline of September 25, 2026. The primary objective is the delivery of verified temperature-stable pharmaceuticals through rigorous cold-chain logistics management.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Medical Supplies SupplyThis subcontract opportunity, managed by the Department of Health and Human Services Omas Strategic Buying Center, involves the sourcing and delivery of non-pharmaceutical medical supplies and clinical equipment for prime contractors on Federal Occupational Health projects. The scope includes providing syringes and various clinical consumables as specified in the Product List, with a primary place of performance in Rockville, Maryland. Under NAICS code 423450, the selected provider must maintain standard medical supply distribution certifications to ensure compliance and quality. Interested parties must submit their responses by September 25, 2026, following the posting date of September 10, 2026.

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS