Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance and Privacy Auditing

Active

State & Local

Response Deadline11/23/2026, 04:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Cybersecurity Compliance and Privacy Auditing supports the Rhode Island Department of Health PDMP projects by providing security audits and privacy compliance oversight for prime contractors. The primary objective is to ensure strict adherence to HIPAA, 45 CFR Part 75, and Rhode Island General Laws, with a specific focus on auditing data privacy controls and verifying the absolute prohibition of offshore access. The scope of work includes validating Business Associate Agreement requirements to prevent the public disclosure of identifying elements and the delivery of detailed security audit reports. This engagement is managed under NAICS code 541519 for the State of Rhode Island, with a response deadline set for November 23, 2026.

General Info

Cybersecurity and privacy auditing for Rhode Island Department of Health PDMP compliance projects.

Agency

State of Rhode Island

NAICS

541519 - Other Computer Related Services

Place of Performance

RI, USA

Set-Aside

NONE

Documents

This scope was carved out of RFP27007077.

The full solicitation package (12 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

DOH Prescription Drug Monitoring Program

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 22

subcontract

Response DeadlineNov 23

Submission deadline

Response Deadline

11/23/2026, 04:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyState of Rhode Island

ContactsNo contacts available

OfficeN/A

Organization / AgencyState of Rhode Island

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security audits and privacy compliance for prime contractors on Rhode Island Department of Health PDMP projects. Verifies prohibition of offshore access, audits data privacy controls, and ensures compliance with HIPAA, 45 CFR Part 75, and Rhode Island General Laws. Validates Business Associate Agreement (BAA) requirements to prevent public disclosure of identifying elements. Delivers security audit reports.

Similar Contracts

Same NAICS industry code

Technical Support & Managed Services (Help Desk)This subcontract opportunity involves providing comprehensive technical support and managed help desk services for prime contractors working on City of Atlanta Department of Watershed Management projects. The selected provider will deliver 24/7 on-screen and chat support specifically for data storage and integration systems, ensuring that all inquiries are addressed within two business days. Operations will be managed through the use of remote support software and formal ticketing systems to track and resolve issues. The scope of work requires the delivery of detailed technical support logs and the resolution of data-related inquiries. This engagement falls under NAICS code 541519 and is associated with the state of Georgia. Interested parties should note the response deadline of November 27, 2026, to be considered for these ongoing technical assistance services.

City of Atlanta

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Managed Security Operations Center (SOC) and Cybersecurity ServicesThis subcontract for Managed Security Operations Center (SOC) and Cybersecurity Services supports prime contractors on Public Health Ontario projects. The scope of work involves providing continuous security monitoring, threat detection, and incident response through the operation of Managed SIEM and XDR platforms. Key technical requirements include performing vulnerability scanning, threat intelligence analysis, and the implementation of agentic AI within SOC operations to enhance efficiency and response capabilities. The service provider must adhere to the Ontario Provincial Cyber Security Operating Model (CSOM) and is responsible for delivering detailed threat reports and executing incident response actions. This opportunity is issued by the Government of Ontario for performance within Canada, with a response deadline set for November 23, 2026.

OAHPP (Public Health Ontario)

POSTED

about 7 hours ago

DEADLINE

in about 1 month

NIST SP 800-171 & DFARS Cybersecurity ComplianceThis subcontract opportunity with the Department of Defense, specifically for the W6QK Acc-Ri-Picatinny agency, focuses on implementing cybersecurity compliance for prime contractors working on Army DEVCOM Armaments Center projects. The primary objective is to ensure the protection of Controlled Unclassified Information through the development of System Security Plans and Plans of Action and Milestones in accordance with NIST SP 800-171 and DFARS 252.204-7012 standards. Technical requirements include the configuration of MFA, least-privilege access controls, and FIPS 140-2 validated cryptology, alongside the establishment of OPSEC standard operating procedures per AR 530-1. Performance will take place at Picatinny Arsenal under NAICS code 541519. Interested parties must respond by November 9, 2026, to provide the necessary approved security plans and documentation.

W6QK Acc-Ri-Picatinny

POSTED

about 8 hours ago

DEADLINE

AF-PLM Tier 1-3 Technical Support ServicesThe AF-PLM Tier 1-3 Technical Support Services subcontract provides comprehensive technical assistance for prime contractors working on US Air Force AF-PLM projects. The scope of work includes managing system functionality, engineering workflows, and data integration through the use of ITSM tools such as Jira Service Desk. The contractor is responsible for delivering Help Desk and Service Management Plans along with detailed monthly statistics to ensure operational transparency. Managed by the Department of Defense under agency FA8770 Aflcmc Gbk, the contract is based in Dayton, Ohio. It mandates strict adherence to service level agreements, requiring a response time within two hours and a resolution for critical issues within four hours. The opportunity is categorized under NAICS code 541519, with a response deadline set for November 5, 2026.

FA8770 Aflcmc Gbk

POSTED

about 8 hours ago

DEADLINE

PLM Cybersecurity and RMF Accreditation ServicesThe PLM Cybersecurity and RMF Accreditation Services subcontract, issued by the Department of Defense under agency FA8770 Aflcmc Gbk, focuses on implementing cybersecurity controls and Assessment and Authorization for prime contractors on US Air Force AF-PLM projects. The scope of work involves executing Risk Management Framework processes in accordance with DoDI 8500.01 and 8510.01, performing STIG compliance checks, and ensuring adherence to DFARS 252.204-7012 and NIST SP 800-171 standards. Key deliverables include the provision of STIG and Vulnerability Evidence Packages. Performance for this contract is based in Dayton, Ohio, and requires personnel to hold Secret and Top Secret clearances to support Cloud One IL6 and JWICS environments. Interested parties must note the response deadline of November 5, 2026. The project falls under NAICS code 541519, emphasizing specialized technical services for high-security government infrastructure.

FA8770 Aflcmc Gbk

POSTED

about 8 hours ago

DEADLINE

CAV RP Portal Reporting ServicesThe CAV RP Portal Reporting Services subcontract, issued by the Navsup Weapon Systems Support under the Department of Defense, involves performing mandatory reporting and data entry for prime contractors on Department of the Navy procurement projects. The selected provider will manage the flow of asset data and execute reporting through the Commercial Asset Visibility Repairables Portal using compatible data management software. Successful execution requires deep proficiency in CAV RP reporting requirements to ensure the delivery of accurate and timely reports. This opportunity falls under NAICS code 541519, with a response deadline set for November 23, 2026.

Navsup Weapon Systems Support

POSTED

about 8 hours ago

DEADLINE

in about 1 month

JISF and NIST Security Compliance ConsultingThe JISF and NIST Security Compliance Consulting subcontract involves providing security audits and compliance reporting for prime contractors working on Administrative Office of the US Courts projects. Based in Washington, the scope of work includes verifying secure transfer file system configurations, auditing JISF Access Controls and Communication Protection, and validating sanitization processes according to NIST SP 800-88 standards. The selected provider must deliver comprehensive security compliance reports, audit logs, and sanitization certificates. Additionally, all assigned personnel are required to pass AO suitability checks to ensure eligibility for the project. This opportunity is categorized under NAICS code 541519 and is managed by the Procurement Management Division of the Judicial Branch.

Aousc-Procurement Management Division

POSTED

about 8 hours ago

DEADLINE

Roche Immunostainer Software Upgrade and Training ServicesThe Roche Immunostainer Software Upgrade and Training Services subcontract involves providing specialized technical support for NIH/NCI laboratory projects. The scope of work focuses on installing software upgrades for Roche Ultra Plus immunostainers and maintaining VConnect software. Additionally, the contractor is responsible for conducting training sessions for NCI technologists to ensure proficiency in new software applications. This project requires qualified Roche IT Specialists to deliver updated software installations and ensure personnel are properly trained. The work is performed in Bethesda, Maryland, under the National Institutes of Health Olao within the Department of Health and Human Services. The contract is categorized under NAICS code 541519.

National Institutes Of Health Olao

POSTED

about 8 hours ago

DEADLINE

Virtual Learning Technology & Technical ProductionThis 8(a) sole source subcontract for the NASA Shared Services Center focuses on providing virtual learning technology and technical production services. The contractor is responsible for supplying enterprise-grade conferencing platforms, such as Zoom and Microsoft Teams, and providing dedicated technical producers to manage live sessions and resolve real-time issues. The primary goal is to ensure a stable and professional virtual classroom environment for prime contractors working on NASA training projects. Compliance is a critical component of this agreement, requiring strict adherence to NASA security standards and AI disclosure requirements as outlined in OMB memo M-25-22. The contract falls under NAICS code 541519 and was posted on October 22, 2026, with a response deadline of October 27, 2026.

NASA Shared Services Center

POSTED

about 8 hours ago

DEADLINE

Area of Interest (AOI) for User Activity Monitoring (UAM) Centralization Prototype Other Transaction (OT)

Solicitation # DISA-OTA-27-R-UAM

The Defense Information Systems Agency (DISA) is seeking prototypes for a centralized, multi-tenant User Activity Monitoring (UAM) solution to replace fractured and decentralized infrastructures within the Department of War. This effort, managed under solicitation DISA-OTA-27-R-UAM, aims to develop a scalable hybrid cloud and on-premises capability utilizing AI/ML. The resulting prototype must support secure multitenancy and data isolation across multiple networks, including NIPRNet, SIPRNet, JWICS, and SAP. This is a Prototype Other Transaction awarded under 10 U.S.C. 4022 and is not subject to the Federal Acquisition Regulations (FAR). The submission deadline for Phase 1 Solution Briefs is October 29, 2026, at 5:00 p.m. CDT. Proposals are evaluated based on their individual merits and their potential to rapidly enhance warfighter capability, with a preference for performance periods of three months or less. Mandatory requirements include CMMC Level 2 (Self) certification and a current NIST SP 800-171 Revision 2 self-assessment posted in the Supplier Performance Risk System. While Non-Traditional Defense Contractors with pending SAM.gov registrations may submit briefs, a fully validated registration, including a Unique Entity Identifier and CAGE code, is required prior to any agreement award. Deliverables for the selected performer will include a fully functional prototype and a complete Technical Data Package containing all software source code developed at government expense.

It Contracting Division - PL84

POSTED

about 8 hours ago

DEADLINE

FortiCare Support ProviderThis subcontract agreement establishes a partnership to provide manufacturer-backed technical support and maintenance subscriptions for network refresh projects managed by the Buffalo Board of Education. The selected provider must be an Authorized Fortinet Support Provider responsible for delivering active support contracts and licenses registered directly to the agency. The scope of work focuses on the provision of FortiCare support licenses to ensure continuous network coverage throughout the contract term via the Fortinet FortiCare Support System. This engagement is categorized under NAICS code 541519, emphasizing the requirement for specialized technical expertise in network maintenance and support.

Buffalo Board of Education

POSTED

about 16 hours ago

DEADLINE

Cybersecurity Professional ServicesThis subcontract for Cybersecurity Professional Services involves providing security assessments and vulnerability management for prime contractors working on Port Authority of New York and New Jersey projects. The scope of work includes conducting penetration tests, implementing security protocols, and utilizing SIEM tools and vulnerability scanners to prepare comprehensive compliance audits. The selected provider will be responsible for delivering detailed security audit reports and actionable remediation plans. Qualified candidates must possess deep knowledge of the NIST framework and hold professional certifications such as CISSP or CISM. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 13, 2026.

The Port Authority of New York and New Jersey

POSTED

about 16 hours ago

DEADLINE

More opportunities from State of Rhode Island

Same awarding agency

Security Hardware and Locking Device SupplierThis subcontract agreement establishes a partnership for the supply of commercial-grade locking devices, cylinders, and security hardware for facility projects managed by the State of Rhode Island. The supplier is responsible for providing high-quality deadbolts and electronic locks to prime contractors at discounted rates off standard list prices, ensuring all material invoices are delivered alongside the hardware. The contract emphasizes a commitment to diversity and inclusion, requiring the supplier to support the prime contractor in meeting established MBE/WBE participation goals. Operating under NAICS code 423410, the agreement remains active from October 22, 2026, through September 29, 2029.

Photographic Equipment and Supplies Merchant Wholesalers

POSTED

about 4 hours ago

DEADLINE

in almost 3 years

Commercial Locksmithing and Security Hardware InstallationThis subcontract for Commercial Locksmithing and Security Hardware Installation involves providing professional locksmithing services for prime contractors on State of Rhode Island facility projects. The scope of work includes diagnosing locking mechanism failures, performing scheduled maintenance, executing emergency repairs, and installing replacement locking devices. The contractor is responsible for maintaining accurate time logs and ensuring all disturbed areas are restored to their original condition to deliver fully functional locking systems. To be eligible, contractors must hold a Rhode Island Contractor Registration, and OSHA 10-hour certification is mandatory for any projects exceeding 100,000 dollars. The contract falls under NAICS code 238990 and is managed by the State of Rhode Island. Interested parties can find further details through the Rhode Island Division of Procurement.

All Other Specialty Trade Contractors

POSTED

about 4 hours ago

DEADLINE

in almost 3 years

MPA 331 FY 27 OE LOCKSMITH SERVICES

Solicitation # OEV27007081

Solicitation OEV27007081 is an Open Enrollment Master Price Agreement issued by the State of Rhode Island to secure comprehensive locksmith services for all state agencies, facilities, and educational buildings. The scope of work includes the installation, repair, maintenance, and troubleshooting of various locking systems, keys, and associated hardware. Contractors must provide services on an as-needed basis and maintain a 24-hour emergency response capability, with an expected two-hour onsite response time for emergencies and a one-hour phone response for service calls. All workmanship and parts are subject to a 12-month warranty, and contractors must utilize state-mandated time-in/time-out logs for billing verification. Proposals are evaluated on a pass/fail basis, requiring a valid Rhode Island Contractor Registration, a detailed description of locksmith experience, and three professional references. Awarded vendors must comply with RIGL 37-13-1 prevailing wage requirements, maintain accurate certified weekly payroll records, and ensure employees possess OSHA 10-hour construction safety certification for projects exceeding 100,000 dollars. The pricing structure is based on service call fees, hourly labor rates for normal and after-hours work, and a percentage discount on locking devices. Applicants must submit a Vendor Assessment Form, Pricing Schedule, MBE Participation Acknowledgement, Prevailing Wage Addendum, and a Supplemental Bidder Attestation regarding conflicts of interest.

POSTED

about 4 hours ago

DEADLINE

in almost 3 years

PDMP Data Management and SMC Metrics EngineeringThe PDMP Data Management and SMC Metrics Engineering subcontract supports prime contractors on Rhode Island Department of Health projects. The scope of work focuses on the ingestion, validation, normalization, and analysis of prescription data for Schedules II-V. This involves implementing ETL pipelines to create a validated, analytics-ready data environment. A primary objective of the contract is the automation of State Measurement and Certification metrics in accordance with CMS Outcomes and Metrics guidance. The successful provider will deliver automated SMC metric reports to ensure compliance and data accuracy for the State of Rhode Island.

Custom Computer Programming Services

POSTED

about 5 hours ago

DEADLINE

in about 1 month

EHR and Pharmacy System Integration ServicesThis subcontract for EHR and Pharmacy System Integration Services involves performing technical integrations between Prescription Drug Monitoring Program systems and external pharmacy dispensing systems and Electronic Health Records for prime contractors working with the Rhode Island Department of Health. The scope of work focuses on the development of APIs and connectors utilizing HL7/FHIR standards, the management of interstate data sharing protocols, and the delivery of integrated data pipelines. The project requires strict adherence to CMS implementation standards and the Medicaid PARTNERSHIP Act. Classified under NAICS code 541512, the opportunity was posted on October 22, 2026, with a response deadline of November 23, 2026. Interested parties can find further details through the Rhode Island Department of Administration procurement portal.

Computer Systems Design Services

POSTED

about 5 hours ago

DEADLINE

in about 1 month

PDMP Web Portal Development and UX DesignThis subcontract for the State of Rhode Island involves the design and development of secure, mobile-responsive web portals for prime contractors working on Prescription Drug Monitoring Program projects. The scope of work includes executing UX design and creating graphical internet interfaces that are compatible with standard browsers, specifically featuring secure login and query capabilities. The selected provider must ensure all deliverables adhere to secure coding practices and Section 508 web accessibility standards to provide a fully functional end product. This opportunity falls under NAICS code 541511, with a response deadline set for November 23, 2026.

Custom Computer Programming Services

POSTED

about 5 hours ago

DEADLINE

in about 1 month

FedRAMP Cloud Hosting and Infrastructure ServicesThe FedRAMP Cloud Hosting and Infrastructure Services subcontract involves providing secure and highly available cloud environments for prime contractors working on Rhode Island Department of Health PDMP projects. The selected vendor is responsible for delivering hosted infrastructure that ensures resilience and disaster recovery to satisfy Severity 1 critical uptime service level agreements. To maintain strict security standards, the vendor must hold FedRAMP certification and comply with all Rhode Island Department of Health cybersecurity policies, which specifically prohibit offshore access to production environments. This engagement, categorized under NAICS code 518210, focuses on the delivery of a fully operational and secure cloud hosting environment for the State of Rhode Island.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 5 hours ago

DEADLINE

in about 1 month

DOH Prescription Drug Monitoring Program

Solicitation # RFP27007077

The Rhode Island Department of Health is soliciting proposals for a single vendor to implement and operate a comprehensive, cloud-based Prescription Drug Monitoring Program (PDMP). The system is designed to collect, manage, and analyze data on controlled substance prescriptions for Schedules II through V and opioid antagonists to enhance patient safety and prevent drug misuse. Key technical requirements include a secure, mobile-responsive web portal that supports interstate data sharing and integration with Electronic Health Records and pharmacy dispensing systems. The solution should preferably be FedRAMP certified and must comply with CMS implementation standards, the Medicaid PARTNERSHIP Act, and specific Rhode Island General Laws. The contract features a base period from January 1, 2027, to April 30, 2028, with four optional extension years. Performance begins with a stakeholder engagement kickoff in January 2027, followed by user experience design, legal reviews, and a data integration pilot. Proposals are evaluated on a 100-point scale, with 70 points allocated to technical qualifications and presentations and 30 points to cost. Awardees must adhere to strict federal funding requirements, including 45 CFR Part 75, the Byrd Anti-Lobbying Amendment, and various non-discrimination laws. Additionally, the vendor must comply with rigorous cybersecurity policies, prohibiting offshore access to production systems and requiring a Business Associate Agreement for data privacy. Invoicing is conducted monthly based on actual expenditures, with payments submitted to the RIDOH Project Officer by the 10th of each month.

POSTED

about 5 hours ago

DEADLINE

in about 1 month

Snow Assistance ServicesThis subcontract for Snow Assistance Services supports prime contractors on emergency projects for the State of Rhode Island. The scope of work involves providing emergency snow removal and winter storm assistance, specifically focusing on the plowing and clearing of roads and parking areas. To execute these tasks, the contractor must utilize specialized equipment including snow plows, salt spreaders, and loaders. Qualified providers are required to hold standard commercial driving licenses to ensure the safe operation of heavy machinery. The primary objective of the contract is the delivery of fully cleared transportation routes and parking facilities. This opportunity is categorized under NAICS code 561730 and is managed through the State of Rhode Island's procurement system.

Landscaping Services

POSTED

DEADLINE

in over 2 years

Emergency Planning & Risk AssessmentThis subcontract for Emergency Planning and Risk Assessment involves providing professional planning and readiness services to prime contractors supporting State of Rhode Island disaster prevention projects. The scope of work includes conducting risk assessments, compliance monitoring, grant management, and recovery and mitigation planning, with a specific requirement for the use of risk assessment modeling software. The selected provider must hold emergency management certifications and is responsible for delivering comprehensive risk assessment reports and training plans. The contract falls under NAICS code 541620 and is associated with the State of Rhode Island. It was posted on October 21, 2026, with a response deadline set for January 31, 2029. Interested parties can find further information through the Rhode Island Division of Procurement portal.

Environmental Consulting Services

POSTED

DEADLINE

in over 2 years

Federal Program Assistance (Stafford Act)This subcontract focuses on providing professional consulting and administrative support to prime contractors managing disaster recovery projects for the State of Rhode Island. The scope of work involves critical pre-declaration recovery reporting, the execution of preliminary damage assessments, and the provision of eligibility guidance specifically for Federal Stafford Act Public Assistance. To successfully execute these tasks, the contractor must possess deep expertise in FEMA and Stafford Act regulations to ensure all recovery reports and closeout certifications meet federal standards. The opportunity is categorized under NAICS code 541611 and is associated with the State of Rhode Island. While the solicitation was posted on October 21, 2026, the response deadline extends to January 31, 2029. Interested parties can find further details and bidding opportunities through the Rhode Island Division of Procurement website.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in over 2 years

Debris Management & Environmental RemediationThis subcontract for Debris Management and Environmental Remediation supports prime contractors on State of Rhode Island recovery projects. The scope of work involves the large-scale removal, separation, and staging of construction, demolition, and vegetative debris. Additionally, the contractor is responsible for specialized services including hazardous waste abatement, marine salvage, tree trimming, erosion control, and the construction of emergency berms to ensure sites are cleared and debris is properly disposed of. Due to the nature of the environmental remediation work, contractors must possess the necessary hazardous waste handling certifications. The project falls under NAICS code 562112 and is managed through the State of Rhode Island. Interested parties can find further details via the Rhode Island Division of Procurement portal, with a response deadline set for January 31, 2029.

Hazardous Waste Collection

POSTED

DEADLINE

in over 2 years

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS