Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance & RMF Accreditation

Active

Federal

Response Deadline11/05/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity with the Department of Defense, managed by W6QK Acc-Apg Contr Ctr, focuses on providing cybersecurity compliance and RMF accreditation for prime contractors supporting Army 7th Signal Command projects. The scope of work involves executing the RMF Assess Only process, managing JTIC certification, and ensuring strict adherence to NIST SP 800-34, 800-171, and CNSSI 7003 standards. The primary objective is the delivery of validated Authority to Operate (ATO) and complete RMF certification packages. Qualified personnel must be DoD 8570/8140 compliant to perform these security auditing services. The project falls under NAICS code 541690, with a response deadline set for November 5, 2026.

General Info

DoD subcontract for cybersecurity compliance, RMF accreditation, and ATO delivery by November 2026.

Agency

Department Of Defense → W6QK Acc-Apg Contr Ctr

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

0, GA, USA

Set-Aside

NONE

Documents

This scope was carved out of PANAPG-27-P-0000057122.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Continental United States (CONUS)-Wide Telecommunications Management System-as-a-Service

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 27

subcontract

Response DeadlineNov 5

Submission deadline

Response Deadline

11/05/2026, 06:00:00 PM UTCin 8 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → W6QK Acc-Apg Contr Ctr

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → W6QK Acc-Apg Contr Ctr

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security auditing and RMF accreditation for prime contractors on Army 7th Signal Command projects. Executes the RMF Assess Only process, manages JTIC certification, and ensures compliance with NIST SP 800-34, 800-171, and CNSSI 7003. Requires DoD 8570/8140 compliant staff. Delivers a validated Authority to Operate (ATO) and RMF certification packages.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, including SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by the deadline of November 17, 2026. Primary inquiries should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 3 hours ago

DEADLINE

Cybersecurity Compliance & Risk Assessment ConsultantThis subcontract opportunity is for a Cybersecurity Compliance and Risk Assessment Consultant to support prime contractors on U.S. Air Force R&D projects. The selected provider will perform security risk assessments, verify compliance with 24 NIST SP 800-172 requirements, develop OCI mitigation plans, and prepare projects for DCMA and DIBAC assessments. Key deliverables include compliance affirmation reports and detailed risk assessment documentation produced through the use of cybersecurity auditing tools and NIST frameworks. The contract is a total small business set-aside under NAICS code 541690, specifically targeting firms with fewer than 500 employees. Qualified candidates must hold CMMC Level 2 and NIST SP 800-171/172 certifications. The response deadline for this requirement is November 25, 2026.

POSTED

about 4 hours ago

DEADLINE

Specialized Technical ConsultantThis subcontract opportunity is for a Specialized Technical Consultant to provide subject matter expertise to prime contractors supporting Department of Defense 2027 SBIR/STTR Phase I projects for the U.S. Air Force. The selected consultant will be responsible for performing specialized analysis, designing methodologies, and assisting in the development of Phase I approaches and objectives. Key deliverables include technical specifications, validated methodologies, and expert reports. The opportunity is a total small business set-aside under NAICS code 541690, requiring firms to have fewer than 500 employees to meet SBIR/STTR mandates. The solicitation was posted on October 28, 2026, with a response deadline of November 25, 2026, at 5:00 PM.

POSTED

about 4 hours ago

DEADLINE

Cybersecurity Validation for Signal RoutingThis small business set-aside subcontract for the U.S. Navy focuses on cybersecurity validation for signal routing within shipboard signal projects. The selected contractor will perform security analysis and vulnerability testing on IOU architectures, specifically conducting threat modeling for Navigation and HM&E signal paths. A primary objective is to execute red-team analysis on routing logic to protect against signal injection, culminating in the delivery of a comprehensive mitigation plan and a Security Assessment Report. To be eligible, contractors must maintain CMMC compliance and demonstrate a strong working knowledge of Department of Defense cybersecurity frameworks. This opportunity is designated as a total small business set-aside under NAICS code 541690. Interested parties must submit their responses by November 25, 2026.

POSTED

about 4 hours ago

DEADLINE

Security and Accessibility (ADA) Compliance AuditThis subcontract opportunity involves performing specialized security and accessibility audits for prime contractors working on California High-Speed Rail Authority facility projects in Fresno. The selected provider will evaluate access control systems, camera placements, and ADA compliance for barriers and standards, utilizing specialized measurement tools to identify security gaps and accessibility deficiencies. A mandatory requirement for this engagement is the Certified Access Specialist (CASp) certification. The primary deliverable is a comprehensive compliance report detailing all findings. Interested parties must respond by November 6, 2026, under NAICS code 541690.

California High-Speed Rail Authority

POSTED

about 4 hours ago

DEADLINE

Physical Hazard Monitoring and Noise ControlThis subcontract opportunity, titled Physical Hazard Monitoring and Noise Control, involves providing specialized industrial hygiene services for prime contractors working with the County of Orange Executive Office in Santa Ana, California. The selected provider will be responsible for monitoring and analyzing physical stressors, including the execution of noise level mapping, vibration analysis, illumination surveys, thermal stress assessments, and radiation monitoring. All work must be performed in accordance with OSHA standards using professional equipment such as sound level meters, dosimeters, and lux meters to produce detailed exposure maps and physical hazard reports. The project falls under NAICS code 541690 and was posted on October 28, 2026. Interested parties must submit their responses by the deadline of November 16, 2026. This engagement is specifically designed to support the County of Orange's budget and finance initiatives through rigorous environmental health and safety monitoring.

County of Orange, County Executive Office - Budget & Finance

POSTED

about 5 hours ago

DEADLINE

Office and Industrial Ergonomics ConsultingThis subcontract opportunity for Office and Industrial Ergonomics Consulting supports prime contractors on industrial hygiene projects for the County of Orange Executive Office in Santa Ana, California. The selected provider will be responsible for performing ergonomic evaluations of workstations and industrial processes, utilizing specialized software and posture analysis tools to conduct comprehensive assessments and deliver detailed evaluation reports. Qualified candidates must hold professional credentials as either a Certified Ergonomic Analyst or a Certified Professional Ergonomist. This procurement falls under NAICS code 541690, with a response deadline set for November 16, 2026.

County of Orange, County Executive Office - Budget & Finance

POSTED

about 5 hours ago

DEADLINE

Industrial Hygiene Services

Solicitation # 017-3116401-GM

The County of Orange, through the County Executive Office - Budget and Finance, is soliciting proposals under RFP 017-3116401-GM for Industrial Hygiene Services. The selected contractor will provide all necessary labor, tools, materials, and supervision to support daily operations and emergency events at various County facilities in Santa Ana, California. Key performance requirements include a 24-hour response time for non-emergency requests and a two-hour onsite mobilization for emergency requests. Deliverables include formal reports with laboratory results and detailed project estimates specifying worker classifications and materials. The award process is based on a points-system evaluation, with a maximum of 900 points for the written response—specifically focusing on the understanding of the project scope—and 100 points for the cost proposal. Final selection is subject to reference checks and past performance. Preference is given to certified OCLSB or DVBE respondents, who receive a 5 percent addition to their cost score. Applicants must provide extensive documentation, including a valid UEI and DUNS number, California Secretary of State registration, DIR Public Works Registration, and compliance with the Levine Act. Proposals must be submitted via the eProcurement Portal by November 16, 2026, at 3:00 pm.

County of Orange, County Executive Office - Budget & Finance

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Risk Assessment and AuditThis subcontract for Cybersecurity Risk Assessment and Audit involves performing independent security audits and risk assessments for prime contractors working on BC Hydro EV network projects. The selected provider will be responsible for conducting Vendor Cybersecurity Risk Assessments and reviewing Risk Management Questionnaires through the use of auditing software and penetration testing tools. All work must ensure strict compliance with the BC Privacy Act and established BC Hydro security standards, culminating in the delivery of a formal Cybersecurity Risk Assessment Report. The opportunity is issued by the British Columbia Hydro and Power Authority under the Province of British Columbia for performance within Canada. Interested parties must submit their responses by the deadline of December 1, 2026. The project is categorized under NAICS code 541690, focusing on specialized security auditing and risk management services to protect critical electric vehicle network infrastructure.

British Columbia Hydro and Power Authority

POSTED

about 22 hours ago

DEADLINE

in about 1 month

Socio-Economic and Health Data AnalystThis subcontract for the South East Wales Corporate Joint Committee seeks a Socio-Economic and Health Data Analyst to support prime contractors through the integration and analysis of demographic, health, and socio-economic data. The primary objective is to identify high-risk populations by merging public health data sets and correlating socio-economic vulnerabilities with specific climate risk zones. The successful provider will be responsible for delivering a comprehensive data integration report and detailed socio-economic vulnerability mapping. Technical requirements include proficiency in statistical software such as R, SPSS, or Stata, and strict adherence to GDPR compliance standards. Interested parties must submit their responses by November 13, 2026, in accordance with the solicitation posted on October 27, 2026. The work falls under NAICS code 541690, focusing on specialized analytical services to inform regional planning and risk assessment.

South East Wales Corporate Joint Committee

POSTED

about 24 hours ago

DEADLINE

Expert Witness Services (Public Utility Commission)This subcontract opportunity is for expert witness services to support prime contractors on projects for the Vermont Department of Public Service. The selected provider will be responsible for preparing prefiled written testimony and delivering live verbal testimony during Public Utility Commission evidentiary hearings. The primary objective is to defend specific survey and focus group methodologies, requiring the contractor to possess deep subject matter expertise in data analysis and survey methodology. Managed by the Vermont Department of Economic Development under NAICS code 541690, the contract focuses on the delivery of professional testimony and hearing appearances. Interested parties must submit their responses by November 30, 2026, at 9:30 AM.

Department of Economic Development

POSTED

DEADLINE

in about 1 month

Justice Facility Security & Circulation ConsultantTom Green County is seeking a Justice Facility Security and Circulation Consultant for a subcontracting opportunity. The selected consultant will be responsible for analyzing and documenting security and circulation constraints for prime contractors working on county justice facility projects. This involves reviewing existing facility layouts to identify security vulnerabilities and analyzing the movement patterns of prisoners, judicial staff, and the general public to ensure safety and efficiency. The scope of work includes documenting functional deficiencies based on established security standards and delivering a comprehensive security and circulation analysis report. Interested parties should note that the response deadline for this solicitation is December 16, 2026.

Tom Green County

POSTED

DEADLINE

in about 2 months

More opportunities from Department Of Defense → W6QK Acc-Apg Contr Ctr

Same awarding agency

24/7 Technical Support & Help Desk ServicesThis subcontract opportunity involves providing 24/7 technical support and help desk services for prime contractors working on Army 7th Signal Command projects. The selected provider will manage a multi-channel help desk and handle incident management using Army-designated ticketing systems to ensure continuous end-user support. In addition to operational support, the contractor is responsible for developing and delivering comprehensive training materials, including user guides and context-sensitive help documentation. These educational services will be delivered through both web-based and classroom settings to ensure users are proficient with the supported systems.

Other Computer Related Services

POSTED

DEADLINE

Data Migration & Database EngineeringThis subcontract focuses on data migration and database engineering services supporting prime contractors for Army 7th Signal Command projects. The primary objective is to deliver a fully populated and validated production database by identifying, cleansing, and migrating telecommunications asset data from over 100 installations. This process involves the utilization of custom scripts and ETL processes to ensure the target database is accurately built and repaired. Managed under the Department of Defense through the W6QK Acc-Apg Contr Ctr agency, the project falls under NAICS code 541513. The solicitation was posted on October 27, 2026, with a response deadline of November 5, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

Telecom Integration & Middleware DevelopmentThe Telecom Integration and Middleware Development subcontract, issued by the Department of Defense under the W6QK Acc-Apg Contr Ctr, focuses on the creation and maintenance of standard network interfaces for prime contractors supporting Army 7th Signal Command projects. The primary technical objective is to ensure seamless interoperability across multi-vendor hardware by developing interfaces for legacy Time Division Multiplexing and Voice over Internet Protocol systems, while also building the associated GUI presentation layer. A critical deliverable of this effort is the implementation of a functional API and interface layer that connects the TMSaaS to physical network elements. This project falls under NAICS code 541511, with a response deadline set for November 5, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

FedRAMP Cloud Infrastructure ProviderThis subcontract opportunity, issued by the Department of Defense under the W6QK Acc-Apg Contr Ctr, seeks a provider to supply and manage a FedRAMP-certified Cloud Service Provider environment. The selected contractor will support prime contractors on Army 7th Signal Command projects by provisioning geographically dispersed computing infrastructure. Key technical requirements include the implementation of load balancing and failover mechanisms to ensure 99.9% availability, alongside the ability to scale infrastructure dynamically to meet operational demands. The primary objective is the delivery of a secure, scalable, and fully operational cloud hosting environment categorized under NAICS code 518210. Interested parties should note the response deadline of November 5, 2026. This engagement focuses on maintaining high-availability infrastructure to support critical defense communications and computing needs.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Continental United States (CONUS)-Wide Telecommunications Management System-as-a-Service

Solicitation # PANAPG-27-P-0000057122

The Department of Defense, through the Army 7th Signal Command (Theater) and ACC-APG Huachuca Division, is conducting market research via a Sources Sought Notice for a CONUS-wide Telecommunications Management System-as-a-Service (TMSaaS). This cloud-based solution is intended to provide the Army with a unified framework to manage telecommunications infrastructure across 100 or more installations. Key functional requirements include asset management, operational support for billing and workflow redistribution, and a network interface capable of monitoring both legacy Time Division Multiplexing and Voice over Internet Protocol elements. The system must maintain an operational availability of 99.9 percent and provide NENA compliant data to support 9-1-1 emergency services. The anticipated period of performance is five years, spanning from January 11, 2027, to January 10, 2032. Contractors must adhere to strict security and cybersecurity standards, including Army Physical Security and DoD Information Security programs, as well as DoD 8570/8140 compliance for staff qualifications. Interested industry partners are requested to submit a capability statement not exceeding five pages by November 5, 2026. Submissions must include a detailed company profile, unique identifiers such as UEI and CAGE codes, socio-economic status, and a list of active federal contract vehicles. This notice is for market research purposes only and does not constitute a formal request for quote or invitation to bid.

Software Publishers

POSTED

DEADLINE

TOTAL ENGINEERING AND INTEGRATION SERVICES (TEIS) IV On-Ramp Opportunity

Solicitation # W91RUS27RA001

The Total Engineering and Integration Services (TEIS) IV program is a multiple-award Indefinite Delivery/Indefinite Quantity (IDIQ) contract supporting the United States Army Information Systems Engineering Command (USAISEC). With a maximum contract ceiling of 800 million dollars, the program provides comprehensive information systems engineering and information technology support services worldwide. The scope covers the full project life cycle, including planning, design, development, implementation, procurement, logistics, testing, sustainment, and systems retirement for information and communication systems. Performance may occur at government or contractor sites across CONUS and OCONUS, including remote or hostile environments. The contract features a five-year base ordering period ending November 30, 2026, with a five-year optional extension potentially extending the total period to ten years. Awards are based on a best-value determination, where technical factors—specifically three sample tasks—are significantly more important than cost. Other high-weight evaluation factors include past performance and small business participation. The contract utilizes a mix of Firm Fixed Price (FFP) and Cost Plus Fixed Fee (CPFF) structures. Due to the nature of the work, strict security requirements are in place, including Top Secret facility clearances and adherence to Intelligence Community Directives for Sensitive Compartmented Information (SCI) and risk management.

Computer Systems Design Services

POSTED

DEADLINE

ARMY OPEN SOLICITATION (AOS)

Solicitation # W9128Z-25-S-A002

The Army Open Solicitation (AOS), solicitation number W9128Z-25-S-A002, is an indefinite open solicitation issued by the U.S. Army Contracting Command-Aberdeen Proving Ground (ACC-APG) Digital Capability Contracting Center of Excellence. Its primary objective is to support all Army mission areas and maximize Army lethality by rapidly acquiring innovative commercial technologies, research and development solutions, and software acquisition pathway procurements. The AOS leverages a broad range of authorities, including FAR 6.102(d)(2), FAR 35.016 Broad Agency Announcements, and various 10 U.S.C. sections for prototypes and experimental procurements, as well as the Commercial Solutions Opening (CSO) process. Interested parties can engage through two primary methods: responding to Active Capability Gaps (ACG) or submitting proposals in response to specific Calls for Solutions. The award process generally follows a multi-phase approach consisting of a Solution Brief, a Live Pitch, and a final Solution Proposal. Evaluation is based on a hierarchy of Technical Merit, Viability, Feasibility and Desirability, and Schedule and Price. All submissions must be unclassified, and the government does not reimburse companies for costs incurred during the initial three phases of the solicitation process. Key administrative requirements include mandatory registration in the System for Award Management (SAM) and the use of the Wide Area Work Flow (WAWF) for invoicing. Security requirements mandate that all government data reside within the exclusive legal jurisdiction of the United States. Solution Briefs are strictly limited to five written pages in 12-point font or fifteen briefing slides and must be submitted as a single PDF document. While the overall AOS remains open in perpetuity until canceled, individual Calls for Solutions have specific, limited response windows.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Agile HR Software Development and DevSecOps AutomationThis subcontract, titled Agile HR Software Development and DevSecOps Automation, supports the Department of Defense by providing software development services for U.S. Army IPPS-A projects. The primary objective is to create enhanced HR capabilities through the development of new features and the implementation of low-code/no-code solutions to replace legacy components. Work is executed using SAFe Solution Trains and Agile Release Trains to ensure streamlined delivery of HR software capabilities. The contract emphasizes the modernization of infrastructure by increasing DevSecOps automation and delivering automated CI/CD pipelines. To ensure compliance and technical proficiency, personnel are required to hold SAFe Certification and strictly adhere to established DevSecOps security standards. The project falls under NAICS code 541511 and is managed under the W6QK Acc-Apg Contr Ctr agency.

Custom Computer Programming Services

POSTED

about 2 months ago

DEADLINE

Oracle PeopleSoft/ERP System Administration and MaintenanceThis subcontract focuses on the operation and maintenance of integrated HR and payroll software for prime contractors supporting U.S. Army IPPS-A projects. The scope of work involves managing Oracle PeopleSoft 9.2+ and Oracle 19c+ COTS platforms across development, test, training, and production environments, with a specific emphasis on executing cloud migrations and transitioning to cloud-native architectures. The project requires the deployment of Oracle Certified Professionals to ensure a stable, operational software baseline characterized by high reliability and scalability. Managed under NAICS code 541513 for the Department of Defense, the contract aims to maintain critical system functionality and performance metrics for the W6QK Acc-Apg Contr Ctr agency.

Computer Facilities Management Services

POSTED

about 2 months ago

DEADLINE

IPPS-A User Training and Instructional DesignThis subcontract, titled IPPS-A User Training and Instructional Design, is issued by the Department of Defense under the W6QK Acc-Apg Contr Ctr agency. The primary objective is to plan and execute comprehensive training programs for prime contractors supporting U.S. Army IPPS-A projects. The scope of work involves developing curricula and instructional materials based on ADDIE standards and delivering these sessions to Army personnel through designated Learning Management Systems. The contractor is responsible for measuring and reporting user proficiency to ensure effective knowledge transfer. Key deliverables include the completion of training modules and the certification of trained users. The contract falls under NAICS code 611519 and was posted on September 3, 2026.

Other Technical and Trade Schools

POSTED

about 2 months ago

DEADLINE

Tier II Technical Support and User Adoption ServicesThis subcontract for Tier II Technical Support and User Adoption Services supports U.S. Army IPPS-A projects by providing advanced technical troubleshooting for approximately 40,000 annual users. The selected provider will manage complex issues escalated from Tier I support using ITSM tools like ServiceNow or Remedy, with a strict requirement for ITIL Certification to ensure standardized service management. The contract, issued by the Department of Defense under the W6QK Acc-Apg Contr Ctr agency, falls under NAICS code 541513. Key deliverables include the successful resolution of support tickets and the provision of detailed reports focusing on user satisfaction and system adoption.

Computer Facilities Management Services

POSTED

about 2 months ago

DEADLINE

Legacy System Subsumption and Interface IntegrationThis subcontract, titled Legacy System Subsumption and Interface Integration, supports U.S. Army IPPS-A projects by integrating legacy HR systems for prime contractors. The scope of work involves subsuming up to 20 legacy systems and significantly expanding external system interfaces from 53 to 135. To ensure the prevention of technical debt, the project utilizes specific data integration tools and API management software in accordance with established Interface Control Documents. Managed under the Department of Defense through the W6QK Acc-Apg Contr Ctr, the contract falls under NAICS code 541512. The primary objective is the delivery of integrated legacy data and the successful implementation of 135 functional external interfaces.

Computer Systems Design Services

POSTED

about 2 months ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS