Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Cybersecurity Compliance and CUI Protection Services

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → Defense Logistics AgencyView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

Not specified

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 21

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Defense Logistics Agency

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → Defense Logistics Agency

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implementation and maintenance of NIST SP 800-171 security controls to protect Controlled Unclassified Information (CUI) and preparation of required assessment documentation.

Similar Contracts

Same NAICS industry code

Employee Assistance Program ProviderThe Port of Seattle is seeking a provider for its Employee Assistance Program (EAP), a critical component of its Total Rewards Package designed to support the wellbeing of employees and their families. The program offers 24/7 confidential access to assessment, counseling, referral, and crisis intervention services, covering areas such as family support, financial and legal assistance, lifestyle resources, and daily living guidance. Available via phone or a dedicated website, the EAP ensures employees receive timely, discreet support to enhance personal and professional resilience, directly contributing to workforce engagement and retention. This initiative aligns with the Port’s broader Century Agenda goal of being a highly effective public agency by fostering a supportive, productive, and empowered workforce. The solicitation is classified under NAICS code 541612 and is posted as a forecast with no set-aside designation. The primary point of contact is Mazarine Ebengho Kyalumba from Human Resources, with Kecia Reichstein serving as the Project Manager. All inquiries and proposals should be directed through the provided contact information and the official UI link on the Port’s hosting platform. The program’s success hinges on a provider’s ability to deliver consistent, high-quality services that meet the diverse and evolving needs of Port employees, reinforcing organizational commitment to employee welfare as a strategic asset in achieving the Port’s mission.

Human Resources

POSTED

about 1 hour ago

DEADLINE

Business Associate Agreement (BAA) & HIPAA ComplianceThe contract requires managing Business Associate Agreements and ensuring full HIPAA compliance for all subcontractors that handle Protected Health Information. This includes establishing, reviewing, and enforcing contractual obligations that align with HIPAA regulations to safeguard PHI throughout its lifecycle, from collection and storage to transmission and disposal. The subcontractor must implement appropriate administrative, physical, and technical safeguards to prevent unauthorized access, use, or disclosure of PHI and must be prepared to demonstrate ongoing compliance through documentation, training, and audits. The work is tied to the Massachusetts Department of Elementary and Secondary Education under solicitation through the DOE02148 agency, with performance required at Santilli Highway in Everett, Massachusetts, 02149. The NAICS code 541612 indicates this is related to management consulting services, suggesting the involvement of compliance oversight and operational guidance rather than direct clinical services. Responses are due by August 31, 2026, and the contract type is classified as a subcontract, meaning the successful bidder will operate under an existing prime agreement to support PHI-related functions. Compliance must be maintained continuously, and any breach or failure to adhere to HIPAA standards will constitute a material contract violation.

DOE02148 - Department of Elementary and Secondary Education

POSTED

about 23 hours ago

DEADLINE

in about 1 month

Subcontractor DEI Compliance Flow-Down & Reporting Support

Defense Logistics Agency

POSTED

DEADLINE

Flow-Down Clause Management & Subcontractor Oversight

Defense Logistics Agency

POSTED

DEADLINE

Subcontractor Compliance Monitoring and ReportingThe contract requires implementation of a system to ensure subcontractors comply with FAR 52.222-90, which mandates adherence to fair labor standards in the performance of federal contracts. This includes actively monitoring subcontractor practices, collecting formal attestations of compliance, and reviewing supporting documentation to verify adherence to wage and working condition requirements. The system must be capable of identifying deviations, documenting noncompliance, and escalating legal or regulatory challenges directly to the prime contractor and the Contracting Officer in a timely manner. The scope encompasses end-to-end oversight of subcontractor conduct, from initial verification through ongoing surveillance and reporting mechanisms. The contractor is responsible for establishing procedures that enable consistent evaluation, maintaining audit-ready records, and providing detailed reports on compliance status, exceptions, and remediation efforts. This work applies to all subcontractors under the prime contract administered by the Defense Logistics Agency under NAICS code 541612, and performance is expected to align with Department of Defense standards for subcontractor accountability and transparency.

Defense Logistics Agency

POSTED

DEADLINE

Subcontractor DEI Compliance Flow-Down and Monitoring

Defense Logistics Agency

POSTED

DEADLINE

NIST SP 800-171 Cybersecurity Compliance and SPRS SubmissionThe contract mandates third-party support to ensure full compliance with NIST Special Publication 800-171, focusing on the assessment of existing cybersecurity controls, development of a comprehensive System Security Plan, and submission of required documentation to the Supplier Performance Risk System. This effort is critical for safeguarding controlled unclassified information within the Department of Defense supply chain and aligns with federal requirements for contractors handling sensitive data. The work is structured around identifying gaps in current security postures, implementing necessary safeguards, and formally recording compliance through accurate and timely SPRS entries to maintain contract eligibility and operational readiness. This subcontract, issued under NAICS code 541612 by the Defense Logistics Agency, requires specialized cybersecurity expertise to meet stringent federal standards. The deliverables are non-negotiable and must be completed to satisfy Defense Department obligations, with performance tied to the contract number SPE7LX26FB10W and linked to the overarching award SPE7LX21D0087. Although the place of performance and point of contact are unspecified, the work is expected to be performed remotely or on-site as necessary to support the agency’s cybersecurity infrastructure. Timely and accurate compliance reporting is essential to avoid disruptions in contractual obligations and maintain trusted vendor status within the federal procurement ecosystem.

Defense Logistics Agency

POSTED

DEADLINE

Subcontractor Management & Flow-Down ComplianceThe contract requires comprehensive oversight of subcontractors to ensure strict compliance with data security protocols, adequate insurance coverage, and enforceable audit rights are properly flowed down from the prime contractor to all tiers of subcontractors. This includes monitoring and verifying that subcontractors adhere to established contractual obligations related to protecting sensitive information, maintaining appropriate liability and cyber insurance policies, and granting the necessary access for audits and compliance reviews. The focus is on systemic enforcement across the supply chain to mitigate risk and maintain alignment with federal and state standards for contractor accountability. The solicitation, titled Subcontractor Management & Flow-Down Compliance, is posted by the State of Utah under NAICS code 541612, targeting professional services related to administrative management and general business support. Interested parties must respond by July 27, 2026, and the work will be performed under the authority of the Utah agency without geographic restrictions specified. This is a subcontract opportunity with no set-aside designation, open to any qualified entity capable of implementing and enforcing robust subcontractor compliance mechanisms across multiple layers of vendor relationships.

POSTED

DEADLINE

HIPAA Compliance and Data Security ImplementationThe contract requires the implementation of comprehensive administrative, physical, and technical safeguards to protect protected health information in full alignment with the HIPAA Security Rule. This includes conducting regular security evaluations to assess and mitigate risks, as well as managing all aspects of breach notification procedures to ensure timely and compliant responses to any data security incidents. The scope demands strict adherence to federal privacy standards and the establishment of robust, ongoing security protocols within the healthcare environment. This subcontract is issued by the Travis County Healthcare District in Texas and is classified under NAICS code 541612, indicating it pertains to management consulting services related to health and safety compliance. The solicitation was posted on July 20, 2026, with a response deadline of August 19, 2026. Performance location details are not specified, but the work is expected to support the district's obligations under HIPAA. Interested parties must submit responses through the designated Texas SmartBuy portal before the deadline to be considered for award.

TRAVIS COUNTY HEALTHCARE DISTRICT

POSTED

DEADLINE

Cybersecurity Compliance Assessment & SPRS ReportingThe contract requires a comprehensive cybersecurity compliance assessment aligned with NIST SP 800-171 standards to ensure adherence to DFARS 252.204-7012 requirements. The scope includes evaluating existing security controls, documenting implementation status, and preparing a formal submission to the Supplier Performance Risk System (SPRS) to demonstrate compliance. All activities must be completed by the response deadline of July 23, 2026, with performance centered in San Diego, California, under the oversight of the ASC Commodities Division within the Department of Defense. The work is classified as a subcontract under NAICS code 541612, which pertains to management consulting services, indicating the engagement involves expert guidance rather than direct operational execution. The deliverables must be accurate, complete, and submitted in a manner that satisfies federal defense contracting obligations regarding the protection of controlled unclassified information.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

in about 22 hours

Cybersecurity Compliance for Third-Party AssessorsThe contract seeks qualified third-party assessors to conduct or support Cybersecurity Maturity Model Certification (CMMC) Level 2 assessments for organizations within the defense supply chain that handle controlled unclassified information. These assessments are critical for ensuring compliance with Department of Defense cybersecurity requirements and validating that contractors implement appropriate safeguards to protect sensitive data. The work is tied to a subcontracting opportunity under the ASC Commodities Division of the Department of Defense, with performance required at a designated location in Mechanicsburg, Pennsylvania, 17050-2411. Assessments must align with CMMC Level 2 standards, which encompass a comprehensive set of security practices and processes designed to mitigate cyber threats targeting information systems in the defense industrial base. Interested parties must submit responses by the deadline of July 28, 2026, with the solicitation posted on July 20, 2026. The North American Industry Classification System code 541612 identifies this as an information technology consulting service, indicating the need for specialized technical expertise in cybersecurity evaluation and compliance auditing. This opportunity does not specify a set-aside designation, so all eligible entities may respond, though the nature of the work demands proven experience in CMMC assessments and familiarity with defense-sector security protocols. The requirement will be managed through the DIBBS platform, and proposers are expected to demonstrate capability in performing objective, accredited evaluations across multiple subcontractor environments within the defense supply chain.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2)The contract requires a third-party assessment and certification for Cybersecurity Maturity Model Certification (CMMC) Level 2 to ensure compliance with NIST SP 800-171 standards for handling Controlled Unclassified Information. This subcontract is tied to the Department of Defense’s ASC Commodities Division and specifically applies to operations at the Tracy location with ZIP code 95304-5000. The assessment must validate the contractor’s ability to implement and maintain the security controls outlined in NIST SP 800-171, ensuring proper protection of sensitive but unclassified data. The solicitation was posted on July 20, 2026, and responses are due by July 28, 2026, under the NAICS code 541612 for management consulting services. The contract is not subject to any set-aside provisions and is intended to secure an independent, accredited assessment to meet federal cybersecurity requirements.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

More opportunities from Department Of Defense → Defense Logistics Agency

Same awarding agency

Industrial Valve Manufacturing

POSTED

about 2 hours ago

DEADLINE

PARTS KIT, SOLENOID

Industrial Valve Manufacturing

POSTED

about 2 hours ago

DEADLINE

WINDOW, OBSERVATION

Glass Product Manufacturing Made of Purchased Glass

POSTED

about 2 hours ago

DEADLINE

Industrial Valve Manufacturing

POSTED

about 2 hours ago

DEADLINE

Industrial Valve Manufacturing

POSTED

about 2 hours ago

DEADLINE

ATTACHMENT, COLLET H

Cutting Tool and Machine Tool Accessory Manufacturing

POSTED

about 2 hours ago

DEADLINE

VALVE, SAFETY RELIEF

Industrial Valve Manufacturing

POSTED

about 2 hours ago

DEADLINE

VALVE, REGULATING, FL

Fluid Power Valve and Hose Fitting Manufacturing

POSTED

about 2 hours ago

DEADLINE

MARKER, IDENTIFICATI

Commercial Printing (except Screen and Books)

POSTED

about 2 hours ago

DEADLINE

CONTAINER, DEPLOYABLE B

POSTED

about 2 hours ago

DEADLINE

POSTED

about 2 hours ago

DEADLINE

STEM, FLUID VALVE

Fluid Power Valve and Hose Fitting Manufacturing

POSTED

about 2 hours ago

DEADLINE