This Subcontract opportunity from Government of Canada was posted on May 28, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Incident Management Services

Closed

International

Submission Closed06/17/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541519

New

SLED

Application Maintenance and Break-Fix Support

Dept Of Transportation

POSTED

DEADLINE

Cybersecurity Sustainment & ATO ManagementThe Cybersecurity Sustainment and ATO Management subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The primary objective is to perform security vulnerability remediation and maintain the Risk Management Framework body of evidence to ensure mobile applications sustain their Authorization to Operate. This work requires remediating vulnerabilities according to DoD policy timelines using government-provided security scanning tools. Key deliverables include updated RMF documentation and detailed vulnerability remediation reports. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 19, 2026.

Defense Health Agency

POSTED

DEADLINE

Cybersecurity & Compliance EngineeringThis subcontract for Cybersecurity and Compliance Engineering supports prime contractors on FBI Enterprise Data Management System projects at Redstone Arsenal. The scope of work focuses on the implementation of critical security measures, including Role-Based Access Control, Multi-Factor Authentication, and automated FISA data minimization marking. The contractor is responsible for developing System Security Plans and Privacy Impact Assessments to facilitate Authority to Operate decisions. The project requires strict adherence to NIST SP 800-53 and FISMA standards to ensure full regulatory compliance. Key deliverables include the provision of security controls and the final attainment of ATO certification. This opportunity falls under NAICS code 541519 and is managed under the Department of Justice.

FBI - Redstone Arsenal

POSTED

DEADLINE

Hand Held Terminals / SOTI Software Requirement

Solicitation # HHT_SOTI

The Defense Commissary Agency (DeCA) is seeking market capabilities through a sources-sought request to establish an end-to-end operational solution for its worldwide enterprise mobile computing fleet. The primary objective is the management of approximately 2,709 Zebra Android Handheld Terminals (HHTs) utilizing the SOTI MobiControl Mobile Device Management (MDM) platform. The scope of work encompasses the provisioning of annual software subscriptions, the deployment and administration of dedicated production and test server environments, and the integration of devices with enterprise retail and warehouse systems. Additionally, the contractor must provide comprehensive depot repair, rapid-exchange warranty administration, and global technical help desk support. Key requirements include the ability to perform turnkey distribution and logistics for all CONUS and OCONUS locations, including secure packaging and customs clearance. The contractor must ensure strict adherence to cybersecurity standards, including Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) support to maintain the system's Authorization to Operate (ATO), with personnel meeting DoD 8140/8570 certifications. The requirement also includes optional life-of-contract technology refreshes for replacement hardware and accessories as equipment reaches end-of-life or end-of-sale status. Interested respondents must be authorized resellers or integrators of the proposed hardware and software, providing new OEM equipment and submitting a capability statement under NAICS 541519 or 541512 by November 9, 2026.

W6QK Acc-Apg Contr Ctr

POSTED

DEADLINE

Department of the Air Force Business and Enterprise Systems (BES) Commercial Solutions Opening (CSO)

Solicitation # FA8771-26-S-C0001

The Department of the Air Force Program Business and Enterprise Systems (BES) has established a multi-year framework via Commercial Solutions Opening (CSO) FA8771-26-S-C0001 to acquire innovative Commercial-Off-The-Shelf (COTS) IT and business solutions. This umbrella solicitation serves as an administrative framework rather than a direct request for proposals, with specific opportunities to be announced through individual open or closed Calls for Proposals published as amendments until March 2, 2030. Awards may be executed as FAR-based contracts or Other Transaction Agreements (OTAs) under 10 USC 2371b. The scope focuses on several key areas, including artificial intelligence, agile methodology, automation, scalability, security, and the reduction of total lifecycle costs of ownership. Eligible participants include traditional and non-traditional defense contractors, research institutions, and both large and small businesses. All offerors must maintain active registration in the System for Award Management (SAM). Evaluation of proposals will be based on the merit of the proposed concept in addressing specific Areas of Interest, focusing on technical soundness, commercial innovation, and price reasonableness, with funds availability serving as a mandatory pass/fail gate. The framework allows for iterative prototyping and the potential for follow-on production contracts, which may be negotiated with or without further competition. While the general framework is open, specific set-asides for small businesses will be determined at the individual call level.

POSTED

DEADLINE

Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services

Solicitation # W91CRB-27-B-A001

Solicitation W91CRB-27-B-A001 is an 8(a) set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to benefit the Aberdeen Test Center in Maryland. The contractor will provide all necessary personnel, equipment, and non-personal services to establish and maintain Authority to Operate (ATO) and RMF compliance for several key systems, including the ATC Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The scope includes engineering analysis of hardware and software baselines, configuration management support, and architectural design. The period of performance runs from November 23, 2026, to November 22, 2031, consisting of a base year and four option years, with a possible six-month extension through May 22, 2032. The contract is a sealed bid acquisition requiring firm-fixed pricing based on an estimated 2,040 hours per year per labor category, with no allowance for travel or other direct costs. Bids must be submitted electronically by November 12, 2026. Evaluation is based on a pass/fail responsiveness check, which requires at least five years of RMF lifecycle reporting experience and three years of Top Secret environment documentation for the surge position. Key personnel must include a Senior IT Systems Solutions Architect serving as the Contract Manager. Security requirements are stringent, requiring a Secret clearance for most personnel and a Top Secret clearance for the surge position, with all work performed at Aberdeen Proving Ground. Invoicing must be processed through the Wide Area Workflow application.

POSTED

DEADLINE

PMX-281 IT Strategy, Software Modernization, and Digital Decision Intelligence Advisory Subscriptions

Solicitation # N00019-26-RFPREQ-WPM281-0281

Naval Air Systems Command (NAVAIR), through PMX-281, is conducting market research via a Sources Sought Notice to identify capable providers for IT strategy, software modernization, and digital decision intelligence advisory subscriptions. The government intends to satisfy this requirement through an existing DoD Enterprise Software Initiative (ESI) Blanket Purchase Agreement (BPA) and is specifically evaluating whether there are sufficient small business BPA holders or authorized resellers to support a small business set-aside. The scope of work involves providing software engineering and decision intelligence tools, including digital platforms and benchmark data, alongside objective advisory and consulting services to support AI integration and enterprise software architecture for United States Naval Aviation. Key deliverables include one Team Leader license, five Executive Member licenses, five Advisory Member licenses, and on-demand specialized consulting services. Technical requirements specify that software platforms must meet DoD Cloud Computing Security Requirements Guide impact levels, such as FedRAMP Moderate or DoD IL4/IL5. Additionally, personnel providing advisory services must be eligible for Top Secret (SCI) clearances, and all providers must comply with DD Form 254 industrial security requirements and ITAR/EAR export controls. Interested parties must submit a structured capability statement not exceeding eight pages by November 4, 2026, detailing their BPA status, socioeconomic designations, and technical conformance.

Naval Air Systems Command

POSTED

DEADLINE

Fiber Cables and Various Accessories

Solicitation # 80NSSC27946786Q

The National Aeronautics and Space Administration (NASA) Shared Services Center is soliciting quotes for the procurement of fiber cables and various accessories to support the NASA Marshall Space Flight Center (MSFC). This firm-fixed-price contract, conducted under full and open competition, aims to maintain compliance with MSFC network infrastructure standards, cybersecurity requirements, and SCIF accreditation standards. All provided materials must be included on the NASA OCIO Approved Products List (APL) to ensure compatibility with existing facility infrastructure. Key items requested include various fiber cables, industrial tape, and fiber cleaners, with a required delivery date of November 2, 2026, to Huntsville, Alabama. The contract will be awarded to the responsible offeror with the lowest price technically acceptable (LPTA) offer. Proposals must be submitted to Cody Guidry by November 6, 2026, and must include the company's SAM CAGE code/UEL and two points of contact. Contractors are required to comply with strict U.S. export control laws, including ITAR and EAR, and must adhere to specific packaging and marking requirements for duty-free entry of supplies. Delivery is established as FOB Destination.

NASA Shared Services Center

POSTED

DEADLINE

JFrog Artifactory Subscription Maintenance

Solicitation # CORHQ-26-Q-0382

Solicitation CORHQ-26-Q-0382 is a firm-fixed-price requirement issued by the Federal Deposit Insurance Corporation for JFrog Artifactory and Xray Enterprise X software subscription maintenance. The period of performance is scheduled from December 8, 2026, to December 7, 2027. The procurement is not a small-business set-aside and falls under NAICS code 541519. Award will be based on the Lowest Price Technically Acceptable (LPTA) method, where proposals are rated as either acceptable or unacceptable based on minimum technical requirements and price reasonableness. Following several amendments, the final due date for quotes is November 10, 2026, at 6:00 p.m. EST. To be deemed responsive, offerors must be the Original Equipment Manufacturer or an authorized JFrog reseller and must submit all required documentation, including the revised Price Schedule (Attachment B-1), completed Section K representations and certifications, and Pre-Award Supply Chain Risk Management information (Attachment J-1). Deliverables include the provision of software licenses and the electronic submission of product keys and activation codes to the designated FDIC software management and oversight personnel.

POSTED

DEADLINE

ACS/VMS Software Licensing and Technical SupportThis subcontract for the County of San Joaquin focuses on providing essential software licensing, firmware updates, and manufacturer-level technical support for airport projects. The scope specifically covers the delivery of current version licenses and active support contracts for Lenel, Lenel OnGuard, Milestone, and Crossmatch. To ensure quality and authenticity, the contractor must maintain Authorized Dealer or Partner status for these specific brands and provide continuous proof of manufacturer contracts. The project is based in Stockton, California, and falls under NAICS code 541519. Interested parties must submit their responses by December 18, 2026. The primary objective is to ensure that prime contractors have the necessary software infrastructure and technical backing to maintain secure and operational airport systems.

County Of San Joaquin

POSTED

DEADLINE

Post-Implementation Support & MaintenanceThis subcontract opportunity focuses on providing essential technical support and maintenance for prime contractors managing workforce tracking projects for the New York State Department of Labor. The scope of work centers on the Eightfold AI platform, requiring the delivery of Tier 2 and Tier 3 support, the implementation of bug fixes, and the execution of software version updates to ensure consistent system availability and the timely resolution of support tickets. Classified under NAICS code 541519, the project is managed by the state of New York. Interested parties should note that the posting date is November 5, 2026, with a response deadline set for December 9, 2026.

NYS Department of Labor

POSTED

DEADLINE

Constituent Data Migration and EnrichmentThis subcontract for Constituent Data Migration and Enrichment provides specialized data cleansing and migration services for prime contractors working on State University of New York Old Westbury projects. The scope of work focuses on executing ETL processes for more than 40,000 alumni and donor records, which includes the cleansing of giving history and demographic information as well as data enrichment to assist in prospect identification. The ultimate goal of the engagement is the delivery of a fully populated and verified CRM database. Due to the sensitive nature of the information involved, the service provider must maintain strict compliance with FERPA and GLBA regulations regarding the handling of student and financial data. The project falls under NAICS code 541519, with a response deadline set for December 2, 2026.

State University of New York (SUNY)

POSTED

about 21 hours ago

DEADLINE

in 26 days

AI Contract Overview

The contract titled Cybersecurity Incident Management Services seeks to engage a provider to deliver comprehensive incident response support for cybersecurity events affecting the Government of Canada. Services include planning for incident response, detecting and analyzing security breaches, containing threats, and facilitating recovery efforts, with an emphasis on thorough documentation of all activities and the capture of lessons learned to improve future readiness. The work is scoped to support the National Capital Region and is classified as a subcontract under NAICS code 541519, indicating specialized information technology services. The solicitation was posted on May 28, 2026, with proposals due by June 17, 2026, and is issued by the Department of Public Works and Government Services under the Government of Canada’s procurement framework.

General Info

Provide cybersecurity incident management, documentation, and recovery support for Government of Canada NCR.

Agency

Government of Canada → Department of Public Works and Government Services

NAICS

541519 - Other Computer Related Services

Place of Performance

National Capital Region (NCR), CAN

Set-Aside

NONE

Documents

This scope was carved out of 20261030-C.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Cybersecurity Professional Services (TBIPS SA EN578‑170432)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedMay 28

subcontract

Response DeadlineJun 17

Deadline has passed

Submission Closed

06/17/2026, 07:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyGovernment of Canada → Department of Public Works and Government Services

ContactsNo contacts available

OfficeN/A

Organization / AgencyGovernment of Canada → Department of Public Works and Government Services

Office AddressN/A

ContactsNo contact information available

Full Description

Provide incident response planning, detection, analysis, containment, and recovery support for cybersecurity incidents, including documentation of activities and lessons learned.