Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, July 22 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Cybersecurity Compliance & Audit Services

Active

State & Local

Response Deadline07/31/2026, 11:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the provision of comprehensive cybersecurity compliance services including weekly static scans, monthly dynamic scans, and annual penetration testing to validate the integrity and security posture of systems. These activities are designed to meet established regulatory and operational standards, ensuring ongoing adherence to cybersecurity best practices. All findings and reports generated from the scanning and testing processes must be delivered under a strict confidentiality agreement to safeguard sensitive information and maintain data integrity. The effort is structured as a subcontract under the NAICS code 541612, indicating it falls within the category of computer facilities management services. It is issued by the state of Utah with a posted date of July 17, 2026, and a response deadline of July 31, 2026. The place of performance and specific location details are not provided, but the work is expected to support Utah’s cybersecurity objectives without restriction to a particular physical site. There is no set-aside classification specified, and the opportunity is open to qualified subcontractors who can meet the required technical and confidentiality obligations.

General Info

Weekly static, monthly dynamic scans, annual penetration testing for Utah cybersecurity compliance under strict confidentiality.

Agency

UtahView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

UT, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 17

subcontract

Response DeadlineJul 31

Submission deadline

Response Deadline

07/31/2026, 11:00:00 PM UTCin 13 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyUtah

ContactsNo contacts available

OfficeN/A

Organization / Agency

Utah

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Perform weekly static scans, monthly dynamic scans, and annual penetration testing to ensure cybersecurity compliance, with results shared under a confidentiality agreement.

Similar Contracts

Same NAICS industry code

Employee Assistance Program ProviderThe Port of Seattle is seeking a provider for its Employee Assistance Program, a key component of its Total Rewards Package designed to enhance employee wellbeing and support retention and recruitment. The program offers 24/7 confidential access to assessment, counseling, and referral services for employees and their families, covering areas such as lifestyle and daily living resources, family support, crisis intervention, and financial or legal assistance. All services are available through a dedicated website and phone line, ensuring flexibility and convenience for participants. The program is intended to bolster employee engagement and effectiveness, directly supporting the Port’s broader mission and Century Agenda goal of becoming a highly effective public agency. The solicitation is classified as a forecast under NAICS code 541612, with no set-aside designation, and is managed by the Port’s Human Resources department. Primary contact for inquiries is Mazarine Ebengho Kyalumba, with Kecia Reichstein serving as Project Manager. The opportunity is open for vendor responses through the Port’s online portal, and while specific performance location details are not provided, services are expected to be delivered remotely or virtually to support Port employees across all work locations. The posting date indicates this is a forward-looking procurement with a planned award timeline following the forecast period.

Human Resources

POSTED

about 10 hours ago

DEADLINE

E-Verify Compliance ServicesThe contract requires the provision of E-Verify and employment verification compliance services for employees performing work in Utah, encompassing full administration of Form I-9 documentation and registration with federal employment eligibility verification programs. The contractor must ensure all hiring and verification processes adhere strictly to federal regulations and Utah-specific employment compliance requirements, maintaining accurate records and timely submissions to avoid penalties or disruptions to workforce operations. This subcontract focuses exclusively on the management of documentation, system updates, and ongoing regulatory adherence related to work authorization verification. The opportunity is posted under NAICS code 541612 and is open for responses until July 31, 2026, with a posting date of July 17, 2026. It is issued by the state of Utah without a specified solicitation number or point of contact, and performance is expected to occur within the state, though no specific city or address is provided. The contract does not include a set-aside designation, and interested parties should access the full details through the specified Utah BonfireHub portal to prepare a submission that demonstrates expertise in federal employment verification systems and state-level compliance protocols.

POSTED

about 21 hours ago

DEADLINE

Subcontractor Compliance Monitoring & ReportingThe contract entails monitoring subcontractors to ensure adherence to FAR 52.222-90, which governs labor standards for service contracts, and managing the proper flow-down of this clause to all applicable subcontractors. The contractor is responsible for verifying compliance across the subcontracting chain, maintaining accurate records of monitoring activities, and documenting any instances of noncompliance. This includes preparing detailed violation reports and ensuring all necessary documentation is accurately compiled and submitted within required timelines to uphold federal regulatory obligations. The work falls under NAICS code 541612 for management consulting services and is awarded by the Defense Logistics Agency under the Department of Defense. Although no specific location or point of contact is provided, the performance is expected to support federal contracting integrity nationwide. The contract emphasizes systematic oversight, recordkeeping, and reporting mechanisms to maintain accountability and ensure that labor standards are consistently applied throughout the subcontractor network. No set-aside status is indicated, and the contract is administered through the DIBBS system with the identifier SPE4A726V1164.

Defense Logistics Agency

POSTED

about 23 hours ago

DEADLINE

Domestic Subcontract Management and Flow-Down AdministrationThis contract governs the administration of subcontract agreements under the Defense Logistics Agency, requiring strict flow-down of federal acquisition regulation clauses, including FAR 52.222-90, to ensure full compliance with U.S. labor and employment standards across the supply chain. All subcontractors must adhere to mandated contractual obligations, with comprehensive recordkeeping maintained to support audit readiness and regulatory verification. The work is aligned with NAICS code 541612, indicating a focus on management consulting services related to subcontract governance and compliance oversight. The administration must support defense logistics operations, with all activities designed to uphold Department of Defense standards for documentation, enforcement, and transparency in subcontractor relationships.

Defense Logistics Agency

POSTED

about 23 hours ago

DEADLINE

Equity & Compliance Analysis (Pay Equity, ADA, Civil Rights)The contract requires a comprehensive analysis of compensation data to identify and address disparities related to gender, race, disability status, and other protected classes, ensuring full compliance with equal employment opportunity laws and industry best practices. The scope includes evaluating pay structures across the organization to uncover systemic inequities and recommending corrective actions that promote fairness and legal adherence, particularly under frameworks such as the ADA and Civil Rights legislation. This subcontract is issued under NAICS code 541612, targeting analytical services for equity and compliance, with a response deadline of July 27, 2026, and a posted date of July 17, 2026. The contracting entity is the Legislative Research Commission of Kentucky, and performance is expected to be conducted remotely or across unspecified locations as indicated by the Place of Performance listing "Other." No set-aside provisions are specified, and there is no designated point of contact provided, with all communications and submissions to be managed through the online portal linked via the Kentucky VSS system.

Legislative Research Comm

POSTED

DEADLINE

RFP #26-013 - Executive Leadership Performance Evaluation and Compensation Framework Consulting ServicesThe Town of Dumfries is soliciting proposals to establish a robust and legally sound executive performance evaluation and compensation framework for its Town Manager and Town Attorney. The selected consultant will be responsible for designing sustainable evaluation methodologies, conducting comprehensive compensation benchmarking, establishing clear governance procedures, and developing a secure electronic platform to facilitate ongoing assessments. Beyond initial development, the consultant must provide implementation support and training to ensure the Town Council can independently administer the framework over the long term, promoting transparency, accountability, and alignment with best practices in local government leadership. The opportunity, identified as RFP #26-013 with solicitation number RFP-124523, was posted on July 16, 2026, and proposals are due by August 20, 2026. The contract falls under a state, local, or educational government procurement and is managed by the Town of Dumfries in Virginia. Ayana Thurston serves as the primary point of contact for inquiries, reachable via email or phone. Proposals must address the need for an objective, defensible system that balances fairness with performance outcomes and is adaptable to evolving governance needs. All work is to be performed in the Town of Dumfries, Virginia, and vendors are expected to demonstrate expertise in public sector leadership evaluation and compensation design.

Town of Dumfries

POSTED

DEADLINE

in about 1 month

Quality Assurance and Inspection ServicesThe contract seeks independent origin inspection and quality assurance services aligned with Department of Defense sampling plans, enforcing a zero tolerance policy for any non-conformances. All work must adhere to strict standards ensuring full compliance with military specifications, with inspections conducted at the source to verify authenticity, integrity, and performance of materials and components. The effort is classified as a subcontract under a Service-Disabled Veteran-Owned Small Business Set-Aside, reserved exclusively for eligible SDVOSBs to promote veteran-owned enterprise participation in defense contracting. The solicitation, issued under NAICS code 541612 for engineering and technical services, is managed by the Department of Defense through the Land Supplier Operations Engines office. Performance is required at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. Responses must be submitted by July 27, 2026, following the posted solicitation date of July 16, 2026. Interested parties must respond through the designated DIBBS platform, and failure to meet the defined quality thresholds or compliance requirements will result in immediate rejection, given the non-negotiable zero tolerance standard for defects or deviations.

LAND SUPPLIER OPNS ENGINES

POSTED

DEADLINE

Cybersecurity Compliance & CMMC Assessment ServicesThe contract seeks third-party assessment services to achieve and verify CMMC Level 2 compliance for systems handling controlled unclassified information, with a strict focus on alignment with NIST SP 800-171 and DFARS 252.204-7012 requirements. The provider must conduct a thorough evaluation of the organization’s cybersecurity controls, document adherence to all applicable security practices, and deliver an official assessment report that validates compliance readiness for Department of Defense contractual obligations. The services are intended to support a subcontractor operating under the ASC Commodities Division, with performance centered at Tinker Air Force Base, Oklahoma, and require the assessor to possess recognized CMMC certification authority and demonstrated expertise in defense cyber standards. All proposals must be submitted by July 24, 2026, under the NAICS code 541612 for management, scientific, and technical consulting services, and the opportunity is structured as a subcontract within the broader DOD supply chain. Participation requires familiarity with DIBBS procurement systems, as the solicitation is posted via the DLA DIBBS platform, and vendors must be prepared to demonstrate capability to perform assessment activities under strict DoD timelines and protocols. No set-aside status is specified, meaning the contract is open to all qualified entities, and the selected provider will be responsible for maintaining objectivity, confidentiality, and integrity throughout the assessment lifecycle, ensuring that findings meet CMMC Accreditation Body guidelines and DoD audit expectations.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense InformationThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to protect covered defense information in accordance with DFARS 252.204-7012. This subcontract focuses on establishing a robust cybersecurity framework to ensure compliance with federal standards for safeguarding sensitive defense data, with performance expected at the specified location in Tracy, California, 95304-5000. The requirement targets organizations capable of supporting the Department of Defense’s cybersecurity mandates through technical implementation, continuous monitoring, and documentation of compliance measures. The solicitation was posted on July 16, 2026, with a response deadline of July 27, 2026, under the NAICS code 541612, which pertains to computer systems design services. The contracting entity is the Land Supplier Operations Engines division of the Department of Defense, and the work is defined as a subcontract, indicating it supports a larger prime contract or program. All proposals must demonstrate proven experience with NIST 800-171 controls, DFARS compliance, and the ability to meet stringent security requirements for handling covered defense information without disruption to operations or data integrity.

LAND SUPPLIER OPNS ENGINES

POSTED

DEADLINE

Bar-Coding and Shipment Labeling ServicesThe contract requires the application of MIL-STD-129 and DLA RP001-compliant bar-coding and labeling practices on all shipment containers to ensure accurate unit identification and seamless automated data capture throughout the supply chain. All labeling must meet strict military standards for durability, legibility, and data structure to support logistics operations and inventory tracking, with full adherence to standardized formats for barcodes, data elements, and container marking. The effort focuses on ensuring every shipment is properly labeled from the point of origin through delivery to facilitate efficient handling by defense logistics systems. This subcontract is a Total Small Business Set-Aside under the NAICS code 541612, reserved exclusively for small businesses, and is issued by the Department of Defense under the Land Supplier Operations Engines organization. Responses are due by July 27, 2026, with the performance location specified as Albany, Georgia, ZIP 31704-1128. The contract emphasizes precise execution of labeling protocols to support defense logistics readiness and requires contractors to maintain compliance with all relevant government standards without reliance on proprietary or non-standard methods.

LAND SUPPLIER OPNS ENGINES

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires support for achieving and maintaining NIST SP 800-171 compliance to safeguard controlled unclassified information, with specific responsibilities including the development and management of a System Security Plan and a Plan of Action and Milestones if CUI is processed, stored, or transmitted. Compliance efforts must align with Department of Defense standards, ensuring all technical, operational, and administrative safeguards are implemented to protect sensitive data across the organization’s systems. The work is scoped under a subcontract and must be performed at Camp Lejeune, North Carolina, with a strict deadline for response by July 27, 2026, and is categorized under NAICS code 541612 for management consulting services. The contracting activity is managed by the Maritime Supply Chain under the Department of Defense, emphasizing the need for rigorous cybersecurity practices aligned with federal mandates for handling unclassified but sensitive information.

MARITIME SUPPLY CHAIN

POSTED

DEADLINE

NIST SP 800-171 Cybersecurity Compliance Assessment and Implementation

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

More opportunities from Utah

Same awarding agency

Surveying and Layout ServicesThe contract is for Surveying and Layout Services to establish site control points, accurately lay out structures, and conduct as-built verification throughout the duration of construction. The work requires precise geospatial measurements and documentation to ensure all elements are positioned according to design specifications and regulatory standards. The services will be critical to maintaining alignment, safety, and compliance across all phases of the project. This is a subcontract opportunity under NAICS code 541370, posted on July 17, 2026, with a response deadline of August 5, 2026. The contracting entity is the State of Utah, and performance is expected to occur within the state, though specific location details are not provided. Interested parties must submit proposals before the deadline to be considered for award, and no set-aside classification or organizational type restrictions are indicated.

Surveying and Mapping (except Geophysical) Services

POSTED

about 17 hours ago

DEADLINE

Environmental Site Assessment and MonitoringThe contract pertains to environmental site assessment and monitoring activities tied to pre-construction phases and ongoing site development, requiring comprehensive surveys to evaluate ecological, geological, and regulatory conditions before any ground-disturbing work begins. It mandates continuous environmental monitoring throughout the development process and the submission of detailed compliance reports to ensure adherence to applicable environmental standards and regulations. The work scope is aligned with NAICS code 541620, indicating it involves environmental consulting services and is structured as a subcontract under the Utah agency. Responses are due by August 5, 2026, with the opportunity posted on July 17, 2026, and all performance activities are expected to occur within Utah, though specific locations are not detailed. There is no set-aside designation specified, and the point of contact information is not provided.

Environmental Consulting Services

POSTED

about 17 hours ago

DEADLINE

Structural Steel Fabrication and ErectionThe contract involves the fabrication and on-site erection of a structural steel framework for the main building, with the work classified under NAICS code 332312 for structural metal fabrication. It is issued as a subcontract and was posted on July 17, 2026, with a response deadline of August 5, 2026, at 8:00 PM. The contracting entity is the State of Utah, though no specific agency office or point of contact is provided. The place of performance is not explicitly detailed beyond the state-level designation, and no set-aside provisions or geographical restrictions are specified. All submissions must be made through the Utah Bonfire Hub platform at the provided web link.

Fabricated Structural Metal Manufacturing

POSTED

about 17 hours ago

DEADLINE

Paving and Site Asphalt WorkThe contract encompasses grading, base preparation, and asphalt paving for roads, parking lots, and access drives across the project site in Utah. Work is required to meet specified engineering and quality standards, ensuring proper drainage, compaction, and surface durability for all paved areas. The opportunity is structured as a subcontract and is open for bids under the NAICS code 237310, which classifies it as heavy and civil engineering construction related to pavement installation. Bidders must submit proposals by the deadline of August 5, 2026, at 8:00 PM MT, with the solicitation initially posted on July 17, 2026. All performance will occur on-site in Utah, though exact location details are not specified. There is no set-aside designation or agency contact information provided, and interested parties should access the full solicitation via the provided online link.

Highway, Street, and Bridge Construction

POSTED

about 17 hours ago

DEADLINE

Concrete Foundations and SlabsThe contract encompasses the full scope of concrete work required for foundations, slabs, and elevated decks, including formwork installation, reinforcement placement, pouring, and surface finishing to meet structural specifications. All work must be executed in accordance with industry standards and engineering requirements to ensure durability and safety of the structural elements. The opportunity is identified as a subcontract under NAICS code 238110 and is openly posted by the Utah agency with a response deadline of August 5, 2026. Interested parties must submit their proposals before the deadline to be considered, and performance is expected to occur within Utah, though exact location details are not specified. The solicitation does not indicate a set-aside classification or point of contact, and bidders are directed to the provided online portal for further instructions and documentation.

Poured Concrete Foundation and Structure Contractors

POSTED

about 17 hours ago

DEADLINE

Plumbing and Piping SystemsThe contract titled Plumbing and Piping Systems involves the installation of comprehensive plumbing, water supply, drainage, and gas piping systems across an unspecified facility in Utah. The work falls under NAICS code 238220, indicating it is classified as a plumbing, heating, and air-conditioning contracting service, and is structured as a subcontract opportunity. The solicitation was posted on July 17, 2026, with a response deadline of August 5, 2026, requiring interested parties to submit proposals before that date. The place of performance and detailed location information are not specified, though the contracting entity is identified as the state of Utah through its agency name. No set-aside provisions or point of contact details are provided, and the opportunity is accessible via a public online portal hosted on bonfirehub.com.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

about 17 hours ago

DEADLINE

Electrical Installation and WiringThe contract pertains to the installation of electrical systems for a commercial building construction project, encompassing wiring, conduits, lighting, and power distribution components. It is structured as a subcontract under NAICS code 238210, which categorizes electrical contracting services, and was posted on July 17, 2026, with a response deadline of August 5, 2026. The work is managed by the State of Utah through its agency organization, though no specific office location or point of contact details are provided. Performance of the work is expected to occur within Utah, though the exact city or zip code is not specified. Interested parties must submit proposals before the deadline to be considered for award.

Electrical Contractors and Other Wiring Installation Contractors

POSTED

about 17 hours ago

DEADLINE

Community Park Signage and WayfindingThe contract solicitation for Community Park Signage and Wayfinding, identified by Job Nos. PRK20033 and PRK24004, seeks a lump sum bid for the design, fabrication, and installation of unified bilingual signage across thirteen Salt Lake City parks, including Liberty Park, Cottonwood Park, Jordan Park, and others, in accordance with the Salt Lake City Parks, Open Space, and Trails Signage Guidelines 2022 and ADA standards. All signage must consist of 1/2 ImageLOC aluminum panels with a minimum ten-year warranty against fading, cracking, peeling, or delamination, featuring a hydrophobic surface for graffiti resistance and installed with proper footings. The scope includes demolition of existing signage and requires strict adherence to APWA standards and supplementary modifications, with all work to be completed within 90 calendar days following the Notice to Proceed and any punch list items resolved within 15 days of receipt. The project is funded under a federal community development block grant, triggering applicable federal provisions and requiring compliance with Section 3 of the Housing and Urban Development Act of 1968 where relevant. The contract mandates a bid security of at least five percent of the total bid amount, and upon award, the contractor must furnish both a performance bond and a payment bond, each for one hundred percent of the contract price, issued by a surety authorized in Utah and meeting U.S. Treasury or A.M. Best criteria. Commercial general liability insurance is required at one million dollars per occurrence, two million dollars general aggregate, and two million dollars products-completed operations aggregate, with Salt Lake City Corporation named as an additional insured on a primary and non-contributory basis; additional coverage includes commercial automobile liability, pollution liability, and workers’ compensation as required under Utah law. The award will be made to the most responsive and lowest qualified, responsible bidder, subject to Salt Lake City’s Value-Based Procurement Program, which applies to bids between $250,001 and $2,000,000 and awards bonus points for nondiscrimination policies, sponsorship of state-compliant apprenticeships, use of pre-employment and for-cause drug testing, and local small business status. Bidders must provide certifications regarding ethical conduct, non-collusion, and compliance with Salt Lake City’s conflict of interest ordinances, and demonstrate organizational structure through submission of resumes for key personnel including the Resident Superintendent. Final payment is not due until thirty days after finance department approval, and liquidated

Other Heavy and Civil Engineering Construction

POSTED

about 17 hours ago

DEADLINE

GJ27-2 MRWSSD Signal Hill Water Treatment Plant Optimization Contractor PrequalificationMountain Regional Water SSD MRWSSD is soliciting prequalification submissions for the GJ27-2 Signal Hill Water Treatment Plant Optimization Contractor Prequalification, with all questions due by August 7, 2026, no later than 5:00 PM Mountain Time, and responses due by August 14, 2026, no later than 3:00 PM Mountain Time, both submitted exclusively via the U3P platform. Bidders must adhere to a strict 1GB file size limit per upload and are responsible for reviewing the full solicitation document to ensure compliance with all requirements, as this procurement is not administered by the Division of Purchasing but by MRWSSD directly. The award decision will not be published on the public posting site, and vendors must contact the designated MRWSSD office to obtain award information. The posting will be closed upon the submission deadline, though all timely responses will still be evaluated according to the solicitation criteria, regardless of the posting's status. All activities under this solicitation are centered in Utah, with no set-aside provisions specified.

Water Supply and Irrigation Systems

POSTED

about 18 hours ago

DEADLINE

Structural Steel Fabrication and ErectionThe contract involves the fabrication and on-site assembly of structural steel frames for buildings or bridges, requiring precise manufacturing and skilled erection to meet engineering specifications. Work is to be performed under a subcontract arrangement with a North American Industry Classification System code of 332312, indicating specialized metal fabrication and structural steel work. The solicitation was posted on July 17, 2026, with responses due by July 30, 2026, leaving a thirteen-day window for qualified contractors to submit proposals. The procurement is associated with the state of Utah, though specific performance locations, agency offices, and points of contact are not detailed in the provided data. All work must be completed in accordance with applicable standards for structural integrity, safety, and timeline adherence, with no set-aside provisions specified for small businesses or other categories. Interested parties must access the official opportunity through the provided link to obtain full technical and administrative requirements.

Fabricated Structural Metal Manufacturing

POSTED

about 20 hours ago

DEADLINE

Ready-Mix Concrete SupplyThe contract is for the supply of ready-mix concrete to construction sites, requiring strict adherence to precise mix designs and delivery schedules to meet project needs. The work is classified as a subcontract under NAICS code 327320, indicating it falls within the ready-mix concrete manufacturing sector. The opportunity was posted on July 17, 2026, with responses due by July 30, 2026, and is being managed by the state of Utah, though specific agency or office details are not provided. Performance is expected to occur across unspecified locations within Utah, with no geographic restrictions listed. The contract does not specify a set-aside designation, meaning it is open to all qualified vendors regardless of business size or owner demographics. All bids must be submitted through the provided online portal by the deadline to be considered.

Ready-Mix Concrete Manufacturing

POSTED

about 20 hours ago

DEADLINE

Heavy Haul and Equipment TransportThe contract is for the transportation of oversized construction equipment, materials, or components using flatbed or lowboy trailers under a subcontract arrangement. It is classified under NAICS code 484220, which pertains to heavy and tractor-trailer truck transportation. The opportunity was posted on July 17, 2026, with a response deadline of July 30, 2026, and is managed by the Utah agency, though no specific office address or point of contact details are provided. The place of performance is not geographically defined, indicating that services may be required across various locations within or beyond Utah’s jurisdiction. Bidders must be prepared to handle specialized freight requiring permits, route planning, and compliance with state and federal regulations for oversize loads.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

about 20 hours ago

DEADLINE