Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Cybersecurity Compliance & Audit Support

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract titled Cybersecurity Compliance & Audit Support is a subcontract issued by the CDC Office of Acquisition Services under the Department of Health and Human Services, focused on ensuring adherence to NIST and HHS cybersecurity standards. Key responsibilities include managing staff access rosters, assigning position sensitivity designations, and implementing media sanitization procedures upon employee closeout to safeguard sensitive health information. These activities are critical for maintaining the integrity and confidentiality of systems handling protected health data in alignment with federal compliance mandates. The solicitation was posted on July 28, 2026, with a response deadline of August 13, 2026, and falls under NAICS code 541618, indicating it relates to management consulting services including cybersecurity and compliance support. Performance is expected to occur at an unspecified location identified only by the city code 2946. There is no set-aside designation provided, and the contract does not include a point of contact or detailed office address, suggesting the recipient will operate under general government guidance with direct accountability to CDC’s acquisition office.

General Info

Cybersecurity compliance support to ensure NIST and HHS standards for protected health data access and sanitization.

Agency

Department Of Health And Human Services → CDC Office Of Acquisition ServicesView Agency

NAICS

541618 - Other Management Consulting ServicesView NAICS

Place of Performance

2946, GA, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Health And Human Services → CDC Office Of Acquisition Services
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Health And Human Services → CDC Office Of Acquisition Services
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Support cybersecurity compliance through staff access rosters, position sensitivity designations, and media sanitization at closeout in accordance with NIST and HHS requirements.

Similar Contracts

Same NAICS industry code

NAICS: 541618
New
SLED
AI Consulting Services IDIQThe Port of Seattle’s Information and Communications Technology Department is preparing to engage consulting services to support the strategic use and implementation of artificial intelligence across its operations. This engagement will be facilitated through an Indefinite Delivery Indefinite Quantity (IDIQ) contract, allowing for flexible and scalable procurement of AI expertise as needs arise. The solicitation is aligned with NAICS code 541618, which pertains to other scientific and technical consulting services, indicating a focus on advisory and implementation support rather than development or product delivery. The contract will be managed by the ICT Enterprise Infrastructure Services group within the Port of Seattle, with primary point of contact Carol Hassard and project manager Harold Federow available for inquiries and coordination. The opportunity is forecasted for release in 2026, with no set-aside provisions indicated, meaning it is open to all qualified vendors regardless of business size or ownership characteristics. Performance of the work is expected to occur at the Port of Seattle’s facilities in Seattle, Washington, though remote components may be permitted. While specific deliverables have not yet been published, the intent is to leverage external expertise to enhance the organization’s AI capabilities, likely encompassing areas such as assessment of current systems, identification of high-impact use cases, development of governance frameworks, and recommendations for ethical and responsible deployment. Interested parties should monitor the official solicitation portal for formal release and submission guidelines ahead of the anticipated bid window.
ICT Enterprise Infrastructure Services

POSTED

about 11 hours ago

DEADLINE

N/A
View Details
NAICS: 541618
New
DIBBS
Cybersecurity Compliance Assessment (CMMC Level 2)A third-party cybersecurity compliance assessment is being sought to verify adherence to CMMC Level 2 requirements and NIST SP 800-171 standards for the handling of Controlled Unclassified Information. This subcontract engagement mandates an independent evaluation by an accredited third-party assessment organization to ensure the contractor’s systems, policies, and practices fully meet the mandatory controls outlined by the Cybersecurity Maturity Model Certification framework. The assessment will focus on confirming the implementation and operation of security controls related to data protection, access control, incident response, and system monitoring as defined by the CMMC-AB guidelines. The solicitation is issued under the Department of Defense’s Maritime Supply Chain ESOC Buys office, with a NAICS code of 541618 for other scientific and technical consulting services. Offers are due by August 10, 2026, and the contract opportunity was posted on July 28, 2026. While no specific place of performance or point of contact is listed, the assessment must be conducted to validate compliance across all relevant systems and processes that handle CUI. The subcontractor must possess current CMMC-AB accreditation and demonstrate proven experience in conducting Level 2 assessments for defense contractors and supply chain partners.
MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

about 24 hours ago

DEADLINE

in 12 days
View Details
NAICS: 541618
New
Federal
Condition Found Reporting & Technical Documentation ServicesThe contract requires the preparation and submission of Condition Found Reports and Preventative Maintenance Reports in alignment with DoD standards, specifically referencing CDRLs A002, B002, C002 for condition findings and A001, B001, C001 for preventative maintenance documentation. All reports must be generated using secure communication channels and formatted to comply with Department of Defense requirements, ensuring data integrity and regulatory adherence throughout the documentation lifecycle. The work is designated as a Small Business Set Aside under the SBA program, with the NAICS code 541618 indicating it pertains to other scientific and technical consulting services. The contract is issued by the Portsmouth Naval Shipyard under the Department of Defense and is limited to a place of performance with a zip code of 03904. Submissions are due by July 31, 2026, at 4:30 PM, following a posting date of July 28, 2026. While the solicitation number and point of contact are not provided, the use of secure channels and strict formatting compliance underscores the sensitivity of the technical data involved and the necessity for precise, auditable reporting procedures. The subcontract nature implies this work supports broader defense maintenance operations, likely related to naval infrastructure or equipment systems under the shipyard’s purview.
Portsmouth Naval Shipyard Gf

POSTED

1 day ago

DEADLINE

in 2 days
View Details
NAICS: 541618
New
Federal
Regulatory and Data Rights ComplianceThe contract requires the preparation of a Technical Data Rights Certification to ensure compliance with Defense Federal Acquisition Regulation Supplement (DFARS) provisions governing the government's rights to use, modify, reproduce, release, perform, display, or disclose technical data developed under the subcontract. This certification must affirm that the contractor has properly identified and documented the government’s rights in technical data, including data delivered or to be delivered, and has aligned all deliverables with applicable DFARS clauses to preserve federal access and usage rights without restrictive licensing or proprietary limitations. Failure to provide accurate and complete certification could result in noncompliance and potential contract penalties. The subcontract is issued under the NAICS code 541618 for other scientific and technical consulting services and is managed by DLA Aviation within the Department of Defense. The submission deadline for responses is August 3, 2026, at 1:00 PM Eastern Time, with the solicitation posted on July 28, 2026. The contract does not specify a set-aside classification and does not identify a point of contact or performance location, indicating that the work may be performed remotely or at the contractor’s discretion. The effort is critical to maintaining the Department of Defense’s legal and operational access to technical information developed under the subcontract and underscores the need for strict adherence to regulatory requirements regarding data rights and documentation.
DLA Aviation

POSTED

1 day ago

DEADLINE

in 5 days
View Details

More opportunities from Department Of Health And Human Services → CDC Office Of Acquisition Services

Same awarding agency

NAICS: 541690
New
Federal
AI Risk Management & Compliance PlanningThe contract titled AI Risk Management & Compliance Planning requires the development and implementation of a comprehensive AI Compliance and Risk Management Plan focused on ensuring the ethical use of artificial intelligence, mitigating algorithmic bias, and enhancing transparency in alignment with federal AI governance standards. The work must be executed under the auspices of the CDC Office of Acquisition Services within the Department of Health and Human Services, with performance expected to occur in a location designated as 2946, though no specific city or state is provided. The solicitation falls under NAICS code 541690 for other scientific and technical consulting services and is classified as a subcontract, indicating it is part of a broader contractual arrangement. All proposals must be submitted by the deadline of August 13, 2026, at 7:00 PM, following the posting date of July 28, 2026. The plan must address the full lifecycle of AI systems used in federal health-related applications, incorporating documented processes for auditing, monitoring, and reporting on fairness, accountability, and explainability. While no set-aside status or point of contact is specified, the expectation is for a highly specialized contractor capable of integrating technical AI expertise with federal regulatory requirements to support public health integrity and trust.
Other Scientific and Technical Consulting Services

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 541612
New
Federal
Controlled Unclassified Information (CUI) Protection & Data PrivacyThe contract titled Controlled Unclassified Information (CUI) Protection & Data Privacy requires the implementation of comprehensive safeguards to secure Controlled Unclassified Information and Personally Identifiable Information in alignment with federal standards. This includes deploying robust encryption methods, enforcing strict access controls, and establishing capabilities for forensic reconstruction of user activity to ensure accountability and compliance. The work must adhere to applicable federal guidelines governing data protection and privacy, with a focus on maintaining the integrity, confidentiality, and availability of sensitive information throughout its lifecycle. This is a subcontract under the CDC Office of Acquisition Services within the Department of Health and Human Services, with a NAICS code of 541612 indicating information technology consulting services. The solicitation was posted on July 28, 2026, and responses are due by August 13, 2026. While specific location details are limited, the place of performance is indicated as 2946, suggesting a physical or operational site associated with the CDC’s operations. The contract does not specify any set-aside status and provides no point of contact, requiring potential offerors to reference the official SAM.gov link for full submission details and requirements.
Human Resources Consulting Services

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 541611
New
Federal
Cybersecurity Incident Response & MonitoringThe contract titled Cybersecurity Incident Response & Monitoring requires the provision of continuous monitoring, detection, and rapid response capabilities for cybersecurity threats targeting CDC data systems. The vendor must deliver 24-hour vigilance for indicator of compromise (IOC) incidents with a strict requirement to report any confirmed breach within one hour of discovery, ensuring minimal exposure and swift mitigation of potential data compromises. This subcontract is issued under NAICS code 541611 for other management consultancy services and is sponsored by the CDC Office of Acquisition Services within the Department of Health and Human Services, emphasizing its critical role in safeguarding public health data infrastructure. The opportunity was posted on July 28, 2026, with a response deadline of August 13, 2026, at 7:00 PM, and the place of performance is designated as location 2946, though no specific city or state is provided. There is no set-aside designation specified, and no point of contact information is listed in the solicitation. The contract mandates high-reliability cybersecurity operations aligned with federal standards for federal health systems, with a strong emphasis on real-time threat mitigation and accountability in breach reporting timelines. Potential responders are expected to demonstrate proven capabilities in enterprise-scale cybersecurity monitoring and incident response tailored to sensitive government data environments.
Administrative Management and General Management Consulting Services

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 518210
New
Federal
Daily-Updated, Longitudinal, Patient-Level Electronic Health Record DataThe Centers for Disease Control and Prevention is soliciting proposals for a Firm-Fixed-Price contract to acquire Daily-Updated, Longitudinal, Patient-Level Electronic Health Record Data under solicitation number 75D30126R78929, with an estimated value exceeding $9 million. The acquisition follows FAR RFO Subpart 12.2 and incorporates procedures from FAR Part 15 due to the contract’s value, and is classified under NAICS code 518210 with a $40 million size standard. The Government has issued a notice of intent to award the contract on a sole-source basis to Truveta, Inc., based on market research and a Justification for Other Than Full and Open Competition, which concludes that Truveta is the only known source capable of meeting the minimum requirements outlined in the Statement of Work. However, other responsible offerors may still submit capability statements and proposals to demonstrate they can satisfy those same requirements, and the Government retains the right to shift to a competitive acquisition if another qualified source emerges. The deadline for submitting capability statements is August 4, 2026, at 3:00 p.m. Eastern Time, and proposals are due no later than August 13, 2026, at the same time. All submissions must be sent electronically to the Contracting Officer, Latoya Michel, at zrb5@cdc.gov; telephone inquiries are not accepted. The contract will be awarded based on best value to the Government, with evaluation criteria tied to the ability to meet the specified technical and operational requirements for data delivery, timeliness, and patient-level accuracy. The performance location is in Atlanta, Georgia, and the acquisition is not set aside for any specific small business category. Interested parties are directed to www.acquisition.gov for the full text of referenced clauses and provisions.
Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

1 day ago

DEADLINE

in 15 days
View Details
NAICS: 325414
New
Federal
Notice of Intent to Sole Source the Procurement of Weekly Delivery of Turkey, Chicken, Guinea Pig, and Horse Red Blood CellsThe Centers for Disease Control and Prevention intends to award a sole-source firm fixed price contract to Lampire Biological Laboratories for the weekly delivery of turkey, chicken, guinea pig, and horse red blood cells used in hemagglutination inhibition assays critical to influenza surveillance. These red blood cells must meet exacting biological performance standards to ensure compatibility with validated CDC assay protocols and to maintain the integrity of longitudinal data used for FluView reporting and vaccine strain selection. Lampire is the only known manufacturer whose products have been proven to consistently support these assays, and switching to an alternative supplier would require extensive and time-consuming validation to confirm equivalency, risking disruption to ongoing surveillance efforts. No competitive solicitation will be issued for this requirement, as the government has determined that Lampire Biological Laboratories is the sole source capable of meeting its operational needs without compromising data continuity. This notice serves solely to assess whether any other responsible sources could meet the technical and performance criteria, with any responses due by August 4, 2026, at 3:00 p.m. Eastern Time to the Contract Specialist at cbp0@cdc.gov. The procurement under NAICS code 325414 and PSC 6505 is managed by the CDC Office of Acquisition Services in Atlanta, Georgia, and all feedback received will be evaluated solely to determine whether a competitive process is warranted, with the final decision resting entirely at the government’s discretion.
Biological Product (except Diagnostic) Manufacturing

POSTED

1 day ago

DEADLINE

in 6 days
View Details
NAICS: 493120
New
Federal
Merck Stockpile Vaccine Storage and Rotation ContractThe Centers for Disease Control and Prevention plans to award a sole source firm fixed price contract to Merck Sharp and Dohme LLC for the storage and rotation of pediatric vaccines within the national Vaccines for Children stockpile. As the sole manufacturer of the vaccine, Merck is uniquely positioned to manage the timely rotation of expiring doses into active inventory and replenish the stockpile to ensure continued vaccine viability. This action is authorized under FAR Part 12.102(b) due to Merck’s exclusive capability to perform the required tasks without compromising quality, reliability, or schedule. The contract is part of a mandatory federal program designed to maintain a stable supply of pediatric vaccines. Interested parties may submit a written capability statement referencing solicitation number 75D30126R73481 by August 7, 2026, at 1:00 p.m. ET, to be reviewed for potential competition, though the government retains sole discretion to proceed with a sole source award. Responses must be sent via email to the designated contracting officers and must clearly demonstrate relevant experience, assets, and ability to meet all performance requirements. No telephone inquiries will be accepted, and submissions are not compensated. All firms must be registered in the System for Award Management to be eligible. The work will be performed in Atlanta, Georgia, under the oversight of the CDC’s Office of Acquisition Services within the Department of Health and Human Services.
Refrigerated Warehousing and Storage

POSTED

1 day ago

DEADLINE

in 9 days
View Details
NAICS: 541512
New
Federal
Section 508 Accessibility Compliance & ICT RemediationThe contract titled Section 508 Accessibility Compliance & ICT Remediation requires full adherence to Section 508 accessibility standards for all electronic deliverables, including reports, software, and multimedia content. Contractors must provide Accessibility Conformance Reports (ACRs) to document compliance and undertake remediation efforts to correct any non-compliant elements, ensuring accessibility for individuals with disabilities. The work is governed by the NAICS code 541512, indicating it falls under computer systems design services, and is structured as a subcontract under the CDC Office of Acquisition Services within the Department of Health and Human Services. Performance is expected to meet federal accessibility requirements without geographic limitations specified. The solicitation was posted on July 27, 2026, with a response deadline of August 10, 2026, at 4:00 PM. No set-aside type or organizational preferences are indicated, and the place of performance details are not provided, suggesting work may be performed remotely or at the contractor’s location. The contract does not include a designated point of contact, and all inquiries should be directed through the official SAM.gov workspace link provided. Compliance with Section 508 is mandatory, and failure to submit accurate ACRs or remediate identified accessibility barriers could result in non-acceptance of deliverables or contract termination.
Computer Systems Design Services

POSTED

2 days ago

DEADLINE

in 12 days
View Details
NAICS: 541830
New
Federal
Scientific Reporting & Technical WritingThe contract under the title Scientific Reporting & Technical Writing requires the preparation of a comprehensive final report that details the methods utilized, results obtained, any deviations encountered, and concluding analyses, with an emphasis on technical accuracy, clarity, and full compliance with government submission standards. The deliverable must meet federal expectations for documentation, ensuring that all information is presented in a manner suitable for official review and archival by the agency. The work is structured as a subcontract under NAICS code 541830, falling under the Department of Health and Human Services, specifically the CDC Office of Acquisition Services, and is intended to support scientific and technical communication efforts aligned with public health objectives. The solicitation was posted on July 27, 2026, with a response deadline of August 10, 2026, at 4:00 PM, indicating a narrow window for proposal submission. The place of performance and point of contact details are not specified, suggesting flexibility in location or that coordination will be handled post-award. There is no set-aside designation, meaning the opportunity is open to all eligible contractors. While no specific performance location is outlined, the deliverable is expected to meet stringent federal reporting requirements, implying that the contractor must be adept at navigating federal scientific documentation protocols and capable of producing high-quality, audit-ready technical content.
Media Buying Agencies

POSTED

2 days ago

DEADLINE

in 12 days
View Details