Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance Support (NIST SP 800-171)

Active

Federal

Response Deadline09/14/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Export-Import Bank of the United States is seeking a subcontractor to provide specialized cybersecurity compliance support under NAICS code 541512. The primary objective of this engagement is to ensure that legal vendors handling Controlled Unclassified Information maintain strict adherence to NIST SP 800-171 standards. Key deliverables include the development of System Security Plans and the creation of Plans of Action and Milestones to address security gaps. Interested parties must submit their responses by September 14, 2026, following the solicitation posting on August 13, 2026. The selected provider will be responsible for ongoing compliance support to maintain the security posture of the bank's external legal partners.

General Info

Subcontractor needed for EXIM Bank cybersecurity compliance and NIST SP 800-171 support.

Agency

Export-Import Bank Of The US → Export Import Bank Of The USView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

DC, USA

Set-Aside

NONE

Documents

This scope was carved out of 83310126Q13CA.

The full solicitation package (8 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Contract Attorneys

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 13

subcontract

Response DeadlineSep 14

Submission deadline

Response Deadline

09/14/2026, 09:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyExport-Import Bank Of The US → Export Import Bank Of The US

ContactsNo contacts available

OfficeN/A

Organization / Agency

Export-Import Bank Of The US → Export Import Bank Of The US

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Provide System Security Plan (SSP) development, Plan of Action and Milestones (POA&M) creation, and ongoing cybersecurity compliance support for legal vendors handling CUI.

Similar Contracts

Same NAICS industry code

Cybersecurity & IT/OT Integration SupportJohnson County, Kansas, is seeking a subcontractor for Cybersecurity and IT/OT Integration Support. The primary objective of this contract is to coordinate with the county IT department to maintain and secure the SCADA system through comprehensive patch management, strict access controls, and continuous network monitoring. The opportunity is categorized under NAICS code 541512. Interested parties must submit their responses by the deadline of September 17, 2026. Further details and application processes are available through the official IonWave procurement portal.

POSTED

about 19 hours ago

DEADLINE

in about 1 month

Technical Support Services for QuestPDFThis subcontract agreement with the Dallas Area Rapid Transit in Texas focuses on the provision of technical support services for QuestPDF Professional software. The scope of work includes comprehensive assistance with the implementation, troubleshooting, and integration of the software, all of which are provided under a subscription model. The opportunity was posted on August 13, 2026, with a response deadline of August 21, 2026. Classified under NAICS code 541512, the contract is managed through the Bonfire hub portal for the agency.

Dallas Area Rapid Transit

POSTED

about 21 hours ago

DEADLINE

Teleconferencing and Hybrid Meeting Support

POSTED

about 21 hours ago

DEADLINE

in about 1 month

Firewall and Two-Factor Authentication (2FA) ImplementationThe Housing Authority of the City of Asheville is seeking a subcontractor for the implementation of firewall and two-factor authentication systems. The scope of work includes the supply, licensing, installation, and maintenance of these operational systems, as well as all necessary configuration, integration, and documentation. This opportunity is categorized under NAICS code 541512 and will be performed in Asheville, North Carolina. Interested parties must submit their responses by August 27, 2026, following the posting date of August 13, 2026.

Housing Authority of the City of Asheville

POSTED

about 21 hours ago

DEADLINE

Managed Network Infrastructure DeploymentThe Housing Authority of the City of Asheville is seeking a subcontractor for a Managed Network Infrastructure Deployment project in Asheville, North Carolina. This contract involves the comprehensive design, supply, installation, and configuration of critical networking components, including switching infrastructure, cabling, and rack hardware. A primary requirement of the project is the deployment of 20 managed Wi-Fi access points that support 802.11 k/v/r standards, ensuring seamless network segmentation and integration. The opportunity was posted on August 13, 2026, with a response deadline of August 27, 2026. Classified under NAICS code 541512, the project focuses on establishing a robust and modern communication framework for the agency. Interested parties must submit their proposals through the specified procurement portal by the established deadline.

Housing Authority of the City of Asheville

POSTED

about 21 hours ago

DEADLINE

IT Services Mgmt/Firewall/WiFi/MDM

Solicitation # P26012

The Housing Authority of the City of Asheville is seeking proposals for IT Services Management, specifically covering Firewall, WiFi, and Mobile Device Management services. This solicitation, identified as P26012, requires interested firms to strictly adhere to all provided terms, conditions, and instructions. All inquiries regarding the proposal must be submitted through the designated Questions and Answers area to ensure transparent documentation for all potential vendors. The deadline for responses is August 27, 2026, at 7:00 PM. The contract is being issued by a SLED organization within the State of North Carolina, with the place of performance located in Asheville. Primary contact for this procurement is Terri Anello, the Buyer, who can be reached via email at procurement@haca.org or by phone at 828-239-3502.

Housing Authority of the City of Asheville

POSTED

about 21 hours ago

DEADLINE

Workday Finance & Financial Reporting SupportThe City of Dallas in Texas is seeking a subcontractor to provide comprehensive functional and technical support for Workday Financial Management. The scope of work focuses on critical financial operations, including the General Ledger, Accounts Payable, and Budgeting, while ensuring strict adherence to municipal accounting standards. Interested parties must submit their responses by September 11, 2026. This opportunity falls under NAICS code 541512 and is managed through the city's procurement portal.

POSTED

about 22 hours ago

DEADLINE

Workday HR & Payroll Functional SupportThe City of Dallas in Texas is seeking a subcontractor to provide comprehensive functional support for its Workday ecosystem. The scope of work focuses on HR, Payroll, Benefits, and Employee Lifecycle Management, requiring expertise in system configuration, user support, change management, and rigorous testing to ensure operational efficiency. This opportunity is categorized under NAICS code 541512. Interested parties must submit their responses by the deadline of September 11, 2026. Further details and application procedures can be accessed through the official Bonfire hub portal.

POSTED

about 22 hours ago

DEADLINE

Software Implementation & Technical Support Services

Florida School for the Deaf and the Blind

POSTED

about 22 hours ago

DEADLINE

Solicitation # BG26-00031088

The City of Dallas is seeking a long-term strategic partnership with qualified firms to provide a comprehensive suite of Workday managed services. The scope of work includes governance support, optimization services, payroll operational support, strategic advisory, and PMO support, as well as guidance on AI and automation and Workday licensing and reseller capabilities. The primary objective is to achieve operational maturity, stabilization, scalability, and continuous innovation within their systems. This solicitation, identified as BG26-00031088, was posted on August 13, 2026, with a response deadline of September 11, 2026. Interested parties must submit their information to the City of Dallas to be considered for this partnership focused on enhancing the city's organizational governance and technical infrastructure.

POSTED

about 22 hours ago

DEADLINE

IT and Data Security for Financial Systems

POSTED

about 22 hours ago

DEADLINE

in about 1 month

Posting Notice for OECM Cashless Transaction Management Solution and Related Services RFP#2026-609

Solicitation # tender_22092

The OECM is seeking proposals for a Cashless Transaction Management Solution and Related Services under RFP#2026-609. This solicitation, identified as tender 22092, was posted on August 13, 2026, and requires responses to be submitted by September 22, 2026. The project is managed by the OECM state organization based in North York, Ontario, with the place of performance located within Ontario. Interested parties should direct inquiries to the buyer contact, Balaji Dhakshina Murthy.

POSTED

about 23 hours ago

DEADLINE

in about 1 month

More opportunities from Export-Import Bank Of The US → Export Import Bank Of The US

Same awarding agency

Contract Attorney Staffing and PlacementThe Export-Import Bank of the United States is seeking a subcontractor for Contract Attorney Staffing and Placement under a Blanket Purchase Agreement. The primary objective of this engagement is to provide qualified contract attorneys on an as-needed basis, with the selected provider managing the full lifecycle of recruitment, vetting, and onboarding. This opportunity falls under NAICS code 561320 and was posted on August 13, 2026. Interested parties must submit their responses by the deadline of September 14, 2026.

Temporary Help Services

POSTED

DEADLINE

in about 1 month

Regulatory Compliance and Legal Advisory SupportThe Export-Import Bank of the United States is seeking a subcontractor for regulatory compliance and legal advisory support. The primary objective of this engagement is to provide expert guidance on international trade laws, export controls, financial regulations, and various federal statutes to ensure the agency remains compliant with all applicable legal frameworks. This opportunity is categorized under NAICS code 541110 for legal services. Interested parties must submit their responses by the deadline of September 14, 2026.

Offices of Lawyers

POSTED

DEADLINE

in about 1 month

Legal Research and Document Drafting ServicesThe Export-Import Bank of the United States is seeking a subcontractor to provide comprehensive legal research and document drafting services. The scope of work includes the preparation of legal memos, the drafting of contracts, and the performance of regulatory analysis to support the agency's overall legal operations. This opportunity is categorized under NAICS code 541199 and was posted on August 13, 2026. Interested parties must submit their responses by the deadline of September 14, 2026.

All Other Legal Services

POSTED

DEADLINE

in about 1 month

Contract Attorneys

Solicitation # 83310126Q13CA

The Export Import Bank of the US is seeking quotations for contract attorney licenses and services under solicitation number 83310126Q13CA. This is a combined synopsis and solicitation for commercial services issued as a request for quotation. The award will be made on a firm fixed-price basis to a responsive and responsible offeror with a proven track record of past performance and the lowest price. All associated costs, including shipping, freight, tariffs, and duties, must be included in the final quoted price. Eligible offerors must be registered in the System for Award Management and submit their quotations to Patricia Ludlow by September 14, 2026, at 5:00pm Eastern Time. Questions regarding this requirement must be submitted by August 28, 2026. There is no incumbent contractor or historical data associated with this requirement, and the procurement is subject to the availability of funds.

All Other Legal Services

POSTED

DEADLINE

in about 1 month

Transition & Knowledge Management for Key PersonnelThe contract titled Transition & Knowledge Management for Key Personnel outlines the essential responsibilities for ensuring a smooth and secure transition when key personnel are replaced, focusing on comprehensive knowledge transfer, timely revocation of system and physical access privileges, and a thorough assessment to identify and qualify suitable replacements. It mandates structured processes to preserve organizational continuity, protect sensitive information, and maintain operational integrity during staffing changes, particularly within high-risk or mission-critical roles. All activities must align with defined contractual clauses to ensure compliance and minimize disruption. This is a subcontract issued by the Export-Import Bank of the US under NAICS code 541611, with a response deadline of August 31, 2026, and a posting date of July 31, 2026. While specific performance locations and point of contact details are not provided, the scope implies nationwide or remote execution in support of the agency’s operational needs. The contract emphasizes procedural rigor over location specificity, placing the highest priority on the quality and documentation of transition activities to safeguard institutional knowledge and access control.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Production Progress & Performance ReportingThe contract requires the preparation and submission of Production Progress Reports in accordance with FAR 52.242-2, along with comprehensive performance documentation to track deliverables, timelines, and compliance metrics. This includes detailed monitoring and recording of production milestones, adherence to scheduled deadlines, and verification of regulatory and contractual requirements to ensure consistent performance alignment. All documentation must be accurate, timely, and structured to support oversight and evaluation by the awarding agency. The contract is a subcontract under NAICS code 541611, issued by the Export-Import Bank of the US, with a submission deadline of August 31, 2026. The nature of the work focuses entirely on reporting and administrative performance tracking rather than direct production or delivery of goods or services. There is no specified place of performance or point of contact, and no set-aside designation is indicated, meaning the subcontract is open to any qualified entity capable of fulfilling the reporting obligations as outlined.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Event-Based Training Delivery ServicesThe contract titled Event-Based Training Delivery Services is a subcontract issued by the Export-Import Bank of the US for the on-site delivery of training sessions at event-specific locations as needed by the agency. The scope includes full logistical coordination, deployment of qualified instructors, and distribution of training materials at various venues determined by the bank’s operational requirements. The contractor will be responsible for ensuring seamless execution of training events, adapting to dynamic scheduling and location needs while maintaining high standards of instructional quality and participant engagement. The solicitation was posted on July 31, 2026, with a response deadline of August 31, 2026, and is classified under NAICS code 611430, which pertains to other schools and instruction. There is no set-aside designation specified, and the place of performance is not confined to a specific geographic area, allowing for nationwide or potentially international delivery depending on event requirements. The contract does not include detailed contact information or specific office addresses, indicating that performance will be driven by the bank’s event calendar and logistical needs rather than fixed locations. All proposals must demonstrate capability in managing mobile training operations and delivering targeted educational content to diverse audiences across varying environments.

Professional and Management Development Training

POSTED

DEADLINE

IT Infrastructure & Data Security Compliance SupportThe contract seeks a subcontractor to implement and maintain secure IT systems capable of handling Controlled Unclassified Information in full alignment with OMB A-130 requirements, Export-Import Bank of the US IT security policies, and Earned Value Management reporting standards. This work involves ensuring robust data protection, system integrity, and continuous compliance across all IT infrastructure supporting sensitive government information, with no tolerance for deviations from mandated security protocols. The scope encompasses both initial deployment and ongoing maintenance to sustain compliance as threats and regulatory expectations evolve. All activities must be conducted in support of the Export-Import Bank of the US, with performance expected to meet the stringent cybersecurity benchmarks established by the agency. The solicitation is open for responses until August 31, 2026, and falls under NAICS code 541512 for Computer Systems Design Services. While no set-aside designation is specified, the subcontract is intended for qualified entities with demonstrated expertise in federal data security, EVM integration, and the specific compliance frameworks governing CUI handling. The place of performance and point of contact details are not provided, but all work must directly enable the agency’s operational and regulatory obligations.

Computer Systems Design Services

POSTED

DEADLINE

Credit Risk Assessment Training DevelopmentThe contract involves the design and development of specialized training curriculum and educational materials aimed at enhancing credit risk evaluation capabilities for international banking professionals. The scope includes creating detailed case studies, scoring models, and underwriting frameworks tailored to global banking environments, ensuring participants gain practical, real-world insights into assessing creditworthiness across diverse international markets. The materials must be comprehensive, technically accurate, and designed for adult learners with professional experience in finance and banking. This subcontract is issued by the Export-Import Bank of the United States under NAICS code 611430, which classifies it as other professional and technical training. The opportunity was posted on July 31, 2026, with a response deadline set for August 31, 2026. Although the place of performance and point of contact details are not specified, the work is expected to be delivered remotely or as defined by the contractor, with no set-aside provisions indicated. The project supports the bank’s mission to strengthen international trade finance by building institutional capacity among global banking professionals.

Professional and Management Development Training

POSTED

DEADLINE

Credit and Bank Training

Solicitation # 83310126Q0057

The Export-Import Bank of the United States is seeking quotations for Credit and Bank Training licenses and services under a combined synopsis/solicitation issued as a Request for Quotation (RFQ) 83310126Q0057, conducted under FAR Part 13.5 and FAR Part 12 using simplified procedures for commercial items and services. The contract will be awarded on a firm-fixed-price basis, with all costs—including shipping, freight, tariffs, and duties—required to be fully included in the quoted price; no additional charges will be permitted after award. All offerors must be registered in the System for Award Management (SAM) and must submit completed representations and certifications through SAM, including their Unique Entity ID and CAGE code. The solicitation does not designate any set-aside and is open to all responsible offerors, with award decisions based on a best-value trade-off assessment that equally weighs Management Approach, Pricing, and Past Performance, rather than on lowest price alone. Past Performance will be evaluated using four key sub-factors: Quality of Services, Management Controls, Cost Control, Schedule Compliance, and Customer Satisfaction, as documented in the provided questionnaire. The period of performance for the resulting contract is up to five years, with the potential for a single six-month extension under FAR clause 52.217-8, contingent upon available funding and written notification. Performance is primarily to occur at the Export-Import Bank’s headquarters in Washington, DC, though services may also be delivered at event-specific locations. Offerors must submit six distinct electronic documents in specified formats—PDF, Word, or Excel—each in a separate file, totaling no more than 20 MB per email, with the SF1449, Management Approach, Past Performance Questionnaire, Q&A Template, and Price Sheet all required by the August 31, 2026, 5:00 PM ET deadline via email to Patricia Ludlow at patricia.ludlow@exim.gov, with the exact subject line specified. The contract incorporates numerous FAR clauses, including those governing commercial item acquisitions, changes, disputes, subcontracting, Buy American provisions, trade agreements, data security, and Controlled Unclassified Information handling, with strict compliance required. Additional special requirements include security protocols requiring adherence to CUI standards, potential Public Trust suitability checks, prohibition of weapons on federal property, mandatory transition procedures for key personnel, and full indemnification of the government against liability arising from contractor negligence or misconduct

Other Technical and Trade Schools

POSTED

DEADLINE