Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Cybersecurity Compliance for Subcontractors

Active

State & Local

Response Deadline08/11/2026, 06:00:59 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

Subcontractors accessing SCDOT systems are required to implement one of three recognized cybersecurity frameworks—NIST CSF, SOC 2, or ISO 27001—to ensure consistent and robust security postures across the supply chain. The solicitation, posted on August 11, 2026, with an identical response deadline, applies to all entities performing work under SCDOT contracts and mandates full compliance with the selected framework as a condition of participation. The effort is classified under NAICS code 541512, indicating it targets computer systems design and related services, and the place of performance is specified as Clarendon, South Carolina. This requirement is designed to mitigate cyber risks associated with third-party access to state systems and aligns with broader state and federal expectations for vendor cybersecurity accountability. All qualifying subcontractors must demonstrate active implementation, not merely adoption, of one of the frameworks and maintain documented controls, policies, and monitoring practices consistent with the chosen standard.

General Info

Subcontractors must implement NIST CSF, SOC 2, or ISO 27001 to access SCDOT systems in Clarendon, SC.

Agency

South Carolina → SCDOTView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Clarendon, SC, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 11

subcontract

Response DeadlineAug 11

Submission deadline

Response Deadline

08/11/2026, 06:00:59 PM UTCin 12 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencySouth Carolina → SCDOT

ContactsNo contacts available

OfficeN/A

Organization / Agency

South Carolina → SCDOT

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implementation of NIST CSF, SOC 2, or ISO 27001 cybersecurity frameworks for subcontractors accessing SCDOT systems.

Similar Contracts

Same NAICS industry code

Virtualization Consulting IDIQThe Port of Seattle is seeking a technical services partner to conduct a thorough evaluation of its existing virtualization platform, focusing on performance, security, and architectural integrity. The engagement aims to validate the platform’s operational reliability, uncover potential risks, and recommend optimization strategies that align with the organization’s business goals, compliance requirements, security standards, and resiliency needs. The deliverable will include a prioritized roadmap outlining actionable steps to enhance the platform’s effectiveness and long-term sustainability. This opportunity is structured under the Virtualization Consulting IDIQ, with the North American Industry Classification System code 541512, indicating it is scoped for computer systems design and related services. The contracting office is the Port of Seattle’s ICT Enterprise Infrastructure Services division, and inquiries should be directed to Carol Hassard as the primary point of contact or Jim Dawson as the project manager. While the solicitation number is not yet assigned, the forecast was posted in July 2026, signaling anticipated future procurement activity. Performance of the work is expected to align with the Port’s internal infrastructure needs, with no specified geographic restrictions beyond the Port’s operational scope.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Azure Consulting IDIQThe Port of Seattle is preparing to engage a cloud services partner through an Indefinite Delivery/Indefinite Quantity (IDIQ) contract to advance its Microsoft Azure and Hybrid cloud capabilities. The primary objective is to validate and strengthen the existing Azure architecture while guiding the implementation of new services in alignment with organizational standards, security requirements, and long-term scalability goals. The partner will be responsible for enhancing resiliency, improving the overall security posture, and ensuring that cloud deployments are optimized for performance, efficiency, and operational readiness across both cloud and on-premises environments. The engagement emphasizes strategic consultation and technical expertise in modernizing infrastructure, with a focus on ensuring all deployments adhere to best practices and support the Port’s evolving business needs. The solicitation is categorized under NAICS code 541512 for Computer Systems Design Services and is managed by the ICT Enterprise Infrastructure Services division. Point of contact for inquiries is Carol Hassard, with Jim Dawson serving as the Project Manager. While the solicitation number and set-aside details are not yet available, the forecasted posting date is July 29, 2026, and the place of performance will be at the Port of Seattle’s facilities.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is forecasting the replacement of its existing Flight Information Display System software to modernize airport operations and enhance passenger experience. This initiative targets the development and deployment of new software that will replace legacy systems, ensuring real-time flight data accuracy, improved reliability, and seamless integration with current airport infrastructure. The project falls under NAICS code 541512, indicating it involves custom computer programming services tailored to the specific operational needs of the airport environment, with the primary place of performance located at the Port of Seattle facilities. The primary point of contact for this opportunity is Farlis Lewis, reachable via email and phone, with Krista Sadler serving as the project manager for technical oversight. The solicitation is classified as a forecast, meaning no formal request for proposals has been issued yet, but interested vendors should prepare for an upcoming procurement process. The agency has not specified a set-aside type, suggesting the opportunity is open to all eligible contractors without preferential sizing or socioeconomic considerations. Although the exact timeline and requirements remain undeclared, stakeholders are encouraged to monitor the official portal link for future updates and formal solicitations.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

IT Systems Integration & LMS SupportThe contract requires the integration of Newsela’s educational content platform with the Florida School for the Deaf and the Blind’s existing Learning Management System and student information systems using industry-standard LTI and API protocols. This technical implementation aims to streamline access to adaptive reading materials and assessment tools, ensuring seamless authentication, data synchronization, and user management across platforms without disrupting existing workflows. The solution must support secure, real-time data exchange to enable personalized learning experiences aligned with student progress tracked within the school’s systems. The solicitation is classified as a subcontract under NAICS code 541512, with a response deadline of August 3, 2026, and was posted on July 29, 2026. The work is specifically tied to the needs of the Florida School for the Deaf and the Blind, indicating the integration must accommodate accessibility requirements for deaf and blind students. While no set-aside designation is specified, the contractor is expected to deliver a robust, scalable, and maintainable integration that aligns with the school’s operational and pedagogical goals. All technical deliverables must comply with LTI and API specifications to ensure compatibility with the institution’s current infrastructure.

Florida School for the Deaf and the Blind

POSTED

DEADLINE

Electronic Invoicing and Payment Processing SupportThe contract titled Electronic Invoicing and Payment Processing Support requires vendors to provide comprehensive support for the submission of electronic invoices in searchable PDF format, ensuring compatibility with automated systems and enabling efficient retrieval and processing of invoice data. Additionally, vendors must facilitate enrollment in PayMode by Bottomline Technologies to enable secure, streamlined electronic payments, reducing manual intervention and improving payment cycle efficiency. This subcontract is issued by Philadelphia Gas Works under the NAICS code 541512 for systems and software services, and the response deadline is August 12, 2026, with the posting date set for July 29, 2026. All performance is expected to align with the agency’s operational requirements for digital financial workflows, though specific geographic performance location details are not provided.

Philadelphia Gas Works

POSTED

DEADLINE

IT Systems Support and Maintenance ServicesThe contract awards ongoing IT support, system maintenance, software updates, and minor enhancements for digital systems used by the Health and Human Services Commission and the Department of State Health Services in Texas. It operates under an Indefinite-Delivery, Indefinite-Quantity (IDIQ) task-order structure, allowing for flexible scope and volume of services based on operational needs. The work encompasses maintaining the stability, security, and performance of critical state digital infrastructure, with a focus on continuous support rather than major development projects. All services must be performed in alignment with state requirements and timelines established through individual task orders issued under this master agreement. The contract was posted on July 29, 2026, with responses due by August 20, 2026, and is classified as a subcontract under NAICS code 541512 for computer systems design services. While no specific set-aside provisions are indicated, the opportunity is managed by the Texas Health and Human Services Commission and requires vendors to be prepared to deliver support across state agencies. Performance is expected to be conducted where the systems are hosted and utilized, primarily within Texas, and interested parties must register and respond through the Texas SmartBuy portal.

Health and Human Services Commission

POSTED

DEADLINE

Cybersecurity & Covered Defense Information (CDI) SafeguardingThis contract requires the implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information handled by subcontractor systems, along with establishing robust procedures for timely cyber incident reporting in accordance with federal requirements. The work is scoped to ensure compliance with Department of Defense cybersecurity standards, focusing on the protection of sensitive data through technical, administrative, and physical safeguards outlined in NIST SP 800-171, and mandates prompt notification and response protocols for any security breaches or anomalies affecting the information systems. The contract is classified as a subcontract under NAICS code 541512, indicating it relates to computer systems design services, and is issued by the Electrical Devices Division of the Department of Defense. Performance is to be conducted at the designated location identified as FPO with ZIP code 09523, and responses must be submitted by August 10, 2026. While no set-aside type is specified, the requirement is targeted toward entities capable of executing stringent cybersecurity frameworks and maintaining compliance with defense information protection mandates in a subcontracting environment.

ELECTRICAL DEVICES DIV

POSTED

DEADLINE

Cybersecurity Compliance Support (NIST SP 800-171)The contract seeks cybersecurity compliance support to achieve NIST SP 800-171 adherence for the protection of Controlled Unclassified Information under DFARS 252.204-7012 requirements. The scope includes developing a System Security Plan, creating and maintaining a Plan of Actions and Milestones, and ensuring full audit readiness through implementation of technical and administrative controls aligned with the NIST framework. This support is critical for safeguarding CUI handled by the contractor and must be delivered to meet Defense Federal Acquisition Regulation Supplement mandates. The work is classified as a subcontract under NAICS code 541512 and is being managed by the ASC Commodities Division within the Department of Defense. Performance is required to occur at Portsmouth, New Hampshire, with a response deadline of August 6, 2026, and the solicitation was posted on July 29, 2026. The contractor must possess demonstrated expertise in federal cybersecurity compliance, specifically in NIST 800-171 implementation, and be prepared to deliver documentation and operational controls that withstand rigorous defense audits. There is no specified set-aside classification for this opportunity.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity and Covered Defense Information (CDI) SafeguardingThe contract requires the implementation and maintenance of cybersecurity controls to safeguard Covered Defense Information in accordance with NIST SP 800-171 and DFARS 252.204-7012, ensuring that all systems handling sensitive defense data meet federal standards for protection. This subcontract is aimed at securing information systems against unauthorized access, disclosure, or compromise, with specific focus on technical, administrative, and physical safeguards defined by the referenced frameworks. Compliance is mandatory and must be demonstrated throughout the performance period, with continuous monitoring and documentation of control effectiveness as a core expectation. The work is to be performed at the APO location with zip code 09094-3219, under the oversight of the Department of Defense through the Medical Supply Chain Pharm FSA. The solicitation was posted on July 29, 2026, with responses due by August 4, 2026, indicating a tight turnaround for proposers to demonstrate capability and readiness. The NAICS code 541512 identifies the work as related to computer systems design services, suggesting the need for specialized technical expertise in cybersecurity architecture and integration. All parties must be prepared to meet rigorous compliance standards, maintain audit-ready records, and ensure ongoing adherence to federal cybersecurity requirements without exception.

MEDICAL SUPPLY CHAIN PHARM FSA

POSTED

DEADLINE

Cybersecurity Compliance (CMMC/NIST) ImplementationThe contract requires support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by implementing all necessary NIST Special Publication 800-171 controls to safeguard covered defense information in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The work involves conducting a self-assessment to identify gaps in current cybersecurity practices and executing a remediation plan to meet the specified control objectives, ensuring the contractor can authentically demonstrate compliance with federal standards for handling sensitive government data. This effort is part of a broader initiative to secure the defense supply chain against cyber threats and maintain eligibility for future DoD contract work. This is a subcontract under a HUBZone Set-Aside, designated for businesses located in and controlled from historically underutilized business zones, with the North American Industry Classification System code 541512 indicating information technology consulting services. The solicitation was posted on July 29, 2026, with a response deadline of August 12, 2026, and is managed by the ASC Commodities Division within the Department of Defense. Performance is expected to occur at an unspecified location, and the contract is accessible via the DIBBS portal for interested HUBZone-qualified subcontractors seeking to support defense cybersecurity compliance initiatives.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance for Contractor Information SystemsThis contract requires the implementation of NIST Special Publication 800-171 controls to safeguard Covered Defense Information on contractor information systems, ensuring alignment with federal cybersecurity standards for protecting sensitive defense data. The scope encompasses establishing, maintaining, and validating a robust cybersecurity posture that meets all regulatory requirements for data protection, access control, audit logging, and system integrity, while also fulfilling mandatory cyber incident reporting obligations as stipulated by applicable Department of Defense directives. The subcontract is issued by the Defense Logistics Agency under the Department of Defense and falls under NAICS code 541512, indicating it pertains to computer systems design services with a focus on cybersecurity compliance. The solicitation is open for responses until August 10, 2026, and the performance location is not specified, implying work may be performed at the contractor’s secure facility or wherever the system hosting Covered Defense Information resides. As a subcontract, the awardee must ensure full alignment with prime contract cybersecurity obligations and may be subject to verification, assessment, or audit by the government or its representatives. Compliance is non-negotiable, and failure to implement the required controls or report incidents timely may result in contract termination, financial penalties, or loss of eligibility for future defense work. The target audience includes contractors with experience in defense information systems, NIST controls implementation, and incident response protocols.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance and CUI SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 Revision 2 controls to safeguard Controlled Unclassified Information within the contractor’s systems and environments. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI in alignment with federal cybersecurity standards. The contractor must also comply with incident reporting requirements mandated by DFARS 252.204-7012, ensuring timely notification and remediation of any cybersecurity events affecting CUI. All activities must be performed under a Total Small Business Set-Aside, reserved exclusively for small businesses as defined by the SBA, and the work is classified under NAICS code 541512 for Computer Systems Design Services. The contract is structured as a subcontract and is associated with the Department of Defense’s Land Supply Chain organization. Responses must be submitted by the deadline of August 28, 2026, with the expectation that performance will occur within the defense supply chain environment.

LAND SUPPLY CHAIN

POSTED

DEADLINE