Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, December 9 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Maintenance and RMF Compliance Services

Open

Federal

Response Deadline11/18/2026, 09:00:00 AM PST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → Defense Health Agency (dha)

NAICS

541519 - Other Computer Related Services

Place of Performance

CA, 94535, USA

Set-Aside

NONE

Documents

This scope was carved out of HT940727N0001.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Kitcheck Subscription

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 12

subcontract

Response DeadlineNov 18

Submission deadline

Response Deadline

11/18/2026, 09:00:00 AM PSTin 6 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Defense Health Agency (dha)

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Defense Health Agency (dha)

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs cybersecurity monitoring and RMF compliance for prime contractors on Defense Health Agency (DHA) projects. Conducts quarterly vulnerability scans using Nessus and DISA STIG checklists, manages POA&Ms, and ensures compliance with DoDI 8510.01, NIST SP 800-171, and HIPAA. Personnel must meet IA Workforce Improvement Program requirements. Delivers quarterly scan reports and updated ATO documentation.

Similar Contracts

Same NAICS industry code

Hardware Maintenance and Support ServicesThis subcontract for Hardware Maintenance and Support Services involves providing ongoing technical support and routine maintenance for Microsoft Surface devices and tablets. The work supports prime contractors operating on projects for the City of Philadelphia Office of Innovation and Technology. Responsibilities include utilizing specific Microsoft Surface maintenance tools to perform troubleshooting and maintenance in accordance with Office Automation Form requirements. The service provider is required to deliver all maintained hardware along with detailed support service logs. This project is based in Philadelphia and falls under NAICS code 541519. Interested parties should note the response deadline of November 18, 2026.

Office of Innovation & Technology (oit)

POSTED

about 7 hours ago

DEADLINE

Hardware Installation and Configuration ServicesThis subcontract for Hardware Installation and Configuration Services supports prime contractors on projects for the City of Philadelphia Office of Innovation and Technology. The scope of work involves the installation, configuration, and physical deployment of Microsoft Surface devices and tablets. All hardware must be configured for city use according to Office Automation Form requirements using specific configuration software and deployment tools to ensure devices are fully operational upon delivery to end-users. The project is based in Philadelphia and falls under NAICS code 541519. Interested parties should note the response deadline of November 18, 2026, for this opportunity posted by the Office of Innovation and Technology.

Office of Innovation & Technology (oit)

POSTED

about 7 hours ago

DEADLINE

Cybersecurity Consulting for Utility InfrastructureThis subcontract for Cybersecurity Consulting for Utility Infrastructure supports the City of Daytona Beach Utilities Department by providing specialized guidance, evaluation, and implementation services for prime contractors. The scope of work focuses on performing critical assessments and vulnerability evaluations for IT and OT infrastructure across water, wastewater, and reclaimed water systems. Key deliverables include comprehensive cybersecurity assessments, detailed implementation plans, and formal compliance reports. To ensure high standards of security and accessibility, the contract requires adherence to WCAG 2.0 AA compliance and mandates that personnel hold industry-recognized certifications such as CISSP or CISM. Interested parties must submit their responses by December 17, 2026, under NAICS code 541519.

Utilities Department

POSTED

about 13 hours ago

DEADLINE

in about 1 month

Software Technical Support and MaintenanceThis subcontract for Software Technical Support and Maintenance involves providing ongoing technical assistance, system patching, and software upgrades for prime contractors supporting Department of the Air Force and Air Combat Command projects at Moody Air Force Base. The scope of work focuses on managing system updates and remote support through the use of patch management tools, all governed by a formal Service Level Agreement to ensure documented uptime and strict patch compliance. The opportunity is categorized under NAICS code 541519 and is associated with the Department of Defense. Interested parties should note the response deadline of November 30, 2026, for this requirement based at zip code 31699.

FA4830 23 Cons Cc

POSTED

about 15 hours ago

DEADLINE

ALLTAX Documentation and Compliance Support

Ibc Acq Svcs Directorate (00004)

POSTED

about 15 hours ago

DEADLINE

Cybersecurity & ATO MaintenanceThis subcontract, titled Cybersecurity and ATO Maintenance, is issued by the Department of Veterans Affairs through the Technology Acquisition Center Nj. The primary objective is to provide continuous security monitoring for prime contractors working on VA software projects. Key responsibilities include managing security artifacts within SNOW Continuous Authorization and Monitoring, ensuring strict adherence to FIPS 140-3 and NIST SP 800-53 standards, and implementing PIV/CAC multi-factor authentication. The scope of work further requires the generation of Software Bill of Materials and the remediation of vulnerabilities in accordance with CISA directives. The contractor is responsible for delivering updated Authority to Operate packages and comprehensive security assessment reports. This opportunity falls under NAICS code 541519, with a response deadline set for November 30, 2026.

Technology Acquisition Center Nj (36C10B)

POSTED

about 15 hours ago

DEADLINE

CATIA V5 and V6 Translator Software Support

Fleet Readiness Center

POSTED

about 15 hours ago

DEADLINE

InnovMetric PolyWorks Maintenance and Technical Support

Fleet Readiness Center

POSTED

about 15 hours ago

DEADLINE

IT Systems Support & Maintenance (Sustainment)The IT Systems Support and Maintenance subcontract focuses on providing critical technical support and sustainment for SRW infrastructure and software tools utilized by prime contractors on NGA projects. The scope of work includes system administration, troubleshooting, and software patching conducted within secure cloud or on-premise server environments specific to the NGA. Key deliverables for this effort include maintaining system uptime, providing detailed maintenance logs, and ensuring the timely resolution of technical support tickets. This opportunity is issued under the Department of Defense and falls under NAICS code 541519. Due to the sensitive nature of the work, all personnel must be US citizens and possess a defense facility security clearance. Interested parties should note the response deadline of December 12, 2026.

Attn: Ms S84 - Ocs

POSTED

about 15 hours ago

DEADLINE

Authorized IT Software ResellerThis subcontract opportunity, titled Authorized IT Software Reseller, involves the procurement and administrative fulfillment of Tungsten software licenses for prime contractors supporting the Naval Criminal Investigative Service in Quantico, Virginia. The selected provider will manage the purchase order process for proprietary software and facilitate the transfer of licenses from the original equipment manufacturer to the government agency. To be eligible, the contractor must hold recognized authorized reseller status and ensure strict compliance with FAR 252.204-7016 regarding Covered Defense Telecommunications Equipment. The project is designated as a total Small Business Set Aside under NAICS code 541519. Interested parties must submit their responses by November 17, 2026, at 3:00 PM. The primary deliverables for this engagement include the successful delivery of fulfilled purchase orders and the provision of software entitlements to the Department of Defense.

Ncis Quantico VA

POSTED

about 15 hours ago

DEADLINE

Audio-Visual (A/V) Equipment & Technical SupportThis subcontract through the NASA Shared Services Center focuses on providing comprehensive audio-visual equipment and technical support for event projects at NASA Headquarters. The scope of work includes the supply of A/V hardware, the establishment of WiFi connectivity, and the provision of on-site technical assistance to ensure seamless data integration and presentation functionality. The opportunity is categorized under NAICS code 541519 and was posted on November 12, 2026, with a response deadline of November 17, 2026. The primary objective is to deliver a fully functional A/V system and dedicated technical support to assist prime contractors in meeting the specific operational needs of NASA HQ events.

NASA Shared Services Center

POSTED

about 15 hours ago

DEADLINE

7A--HRD ALLTAX software

Solicitation # 140D0427Q0887

The Department of the Interior, through the Interior Business Center, is conducting a sources sought notice for the procurement of FMS E-Series ALLTAX Full US software. The anticipated contract is a firm-fixed-price agreement with a total period of performance from April 1, 2027, through March 31, 2032, consisting of one 12-month base period and four 12-month option periods. The scope of work requires continuous, uninterrupted subscription coverage for all 50 states, the District of Columbia, and applicable U.S. territories, including the timely delivery of tax-table, rate, rule, and jurisdictional updates for federal, state, city, county, and Social Security taxes. Key deliverables include the maintenance of a secure electronic repository for current and historical ALLTAX bulletins and electronic delivery of software subscriptions and updates within 30 calendar days of award. The software must be compatible with FPPS and Natural/ADABAS batch and online processing and must maintain conformance with applicable Revised Section 508 standards. Interested firms must submit a capability statement in PDF format to Contracting Officer Christina Lene by November 23, 2026, detailing their business size, socioeconomic status, and ability to provide the required processing support at the government scale.

Ibc Acq Svcs Directorate (00004)

POSTED

about 15 hours ago

DEADLINE

More opportunities from Department Of Defense → Defense Health Agency (dha)

Same awarding agency

Pharmacy Automation System User Training

Professional and Management Development Training

POSTED

about 15 hours ago

DEADLINE

Pharmacy Automation System Installation and Configuration

Computer Systems Design Services

POSTED

about 15 hours ago

DEADLINE

Pharmacy Kit Automation Hardware and RFID Tag Supplier

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

about 15 hours ago

DEADLINE

Kitcheck Subscription

Solicitation # HT940727N0001

The Defense Health Agency is seeking a Kitcheck Subscription under solicitation HT940727N0001 to provide a Pharmacy Kit Automation System at the David Grant USAF Medical Center in Fairfield, California. The contractor is responsible for the provision, installation, and maintenance of hardware, software, RFID tags, and comprehensive support to replace manual pharmacy kit management processes. The contract follows a performance period consisting of a base year from December 1, 2026, to November 30, 2027, with two subsequent one-year option periods extending through November 2029. A critical milestone requires all personnel to be trained and qualified within 30 days of system installation. The project is subject to stringent cybersecurity and regulatory standards, including DoDI 8510.01, NIST SP 800-171, and DoDI 8582.01. The contractor must provide quarterly vulnerability and configuration scan results and ensure no unmitigated high or moderate severity vulnerabilities exist per DISA STIGs and Nessus scans. Compliance with HIPAA privacy rules via DoDM 6025.18 and the Information Assurance Workforce Improvement Program is mandatory. The contractor must also appoint a contract manager and an alternate to oversee performance, while maintaining personnel security investigations for those accessing Controlled Unclassified Information.

Software Publishers

POSTED

about 15 hours ago

DEADLINE

BK Connect Hardware and Software Maintenance

Solicitation # HT9426-27-NOI-TJB-01

The Defense Health Agency intends to award a firm fixed price sole source contract to Hottinger Bruel & Kjaer, Inc. for the continued hardware and software maintenance of sound and vibration measurement and analysis systems. This requirement is on behalf of the United States Army Aeromedical Research Laboratory and is being pursued under the authority that only one responsible source can satisfy the agency's specific needs. While this notice is not a request for quotations, other vendors may challenge the sole source basis by submitting a detailed capability statement to Tara Borntreger by 12:00 PM EST on November 20, 2026. The government maintains full discretion in determining whether to compete the procurement based on any evidence provided regarding a vendor's ability to perform the services.

Instrument Manufacturing for Measuring and Testing Electricity and Electrical Signals

POSTED

DEADLINE

DHA Enterprise Referral Care Coordination Center Contract (RC3)

Solicitation # RC3_20261030

The Defense Health Agency is seeking industry feedback on a draft Performance Work Statement for the Enterprise Referral Care Coordination Center (RC3) contract. The primary objective of this initiative is to establish a standardized, unified enterprise solution to eliminate variations in patient appointing, referral management, and care coordination across all Military Treatment Facilities worldwide. The RC3 will serve as a central hub for beneficiaries in both direct care and the private sector, focusing on high-quality specialty navigation and first-call resolution. The proposed period of performance is five years, consisting of a base year that includes a transition period and four subsequent 12-month option years. The contract includes a rigorous transition-in process featuring a non-operational mobilization phase during the first 30 days and a phased, wave-based rollout. Payments for transition services are tied to six specific performance gates, ranging from administrative tasks to the achievement of Final Operating Capability. Key requirements include strict adherence to HIPAA and the Privacy Act of 1974, mandatory cybersecurity training, and the procurement of Common Access Cards for personnel. Additionally, the government asserts unqualified ownership of data and prohibits the use of government data for AI or machine learning training. Performance will be monitored via a Quality Assurance Surveillance Plan and a Performance Requirements Summary to ensure minimum acceptable quality levels are met.

Office Administrative Services

POSTED

DEADLINE

in about 15 hours

Cybersecurity Assessment and Compliance ServicesThe Cybersecurity Assessment and Compliance Services subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The scope of work involves performing vulnerability scanning, penetration testing, and security configuration checks, alongside red-team and blue-team assessments. All activities must adhere to NIST SP 800-series and DoDI 8500.01 standards, with a focus on architectural reviews, cyber incident reporting, and DoDC3 compliance. Key deliverables include detailed vulnerability reports and incident response logs. Due to the sensitive nature of the work, personnel are required to hold high-level security clearances. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 13, 2026.

Other Computer Related Services

POSTED

DEADLINE

in about 15 hours

EHR Systems Administration and Technical SupportThe EHR Systems Administration and Technical Support subcontract provides critical technical administration for Electronic Health Record and Health Information Exchange systems supporting prime contractors on Defense Health Agency projects. The scope of work includes managing data flow, implementing data sharing and use agreements, and supporting Phase 0 mobilization within FedRAMP authorized cloud environments. Key deliverables center on maintaining system uptime and ensuring the functionality of integrated EHR appointment modules. Strict adherence to regulatory standards is required, specifically compliance with NIST SP 800-88 Rev 2 and DoDI 8500.01. This opportunity falls under NAICS code 541512 and is associated with the Department of Defense. Interested parties should note the response deadline of November 13, 2026.

Computer Systems Design Services

POSTED

DEADLINE

in about 15 hours

Healthcare Care Coordination and Patient Navigation ServicesThis subcontract for Healthcare Care Coordination and Patient Navigation Services supports prime contractors on Defense Health Agency projects within the Department of Defense. The scope of work involves managing centralized direct care appointments and providing specialty navigation and care coordination. Operations must adhere to DHA-PM 6000.100, TOM, and TSM standards, utilizing Electronic Health Records, IVR systems, and Capability and Capacity Dashboards to deliver managed patient appointments and detailed coordination logs. Compliance is a critical requirement, as all activities must align with HIPAA and Privacy Act regulations. Additionally, personnel are required to hold full practice level clinical licensing to perform the necessary duties. The opportunity is categorized under NAICS code 621999, with a response deadline set for November 13, 2026.

All Other Miscellaneous Ambulatory Health Care Services

POSTED

DEADLINE

in about 15 hours

DHA Enterprise-Wide Commercial Solutions Opening (CSO)

Solicitation # HT003826SC005

The Defense Health Agency (DHA) has established the Enterprise-Wide Commercial Solutions Opening (CSO), solicitation number HT003826SC005, to identify and acquire commercial products, services, and non-developmental items. Active from August 7, 2026, through August 6, 2027, this initiative seeks commercially available capabilities that can be deployed immediately or modified to meet DHA requirements across its Medical Digital Solutions, Medical Services, and Medical Products portfolios. The government will utilize a variety of award vehicles, including firm-fixed-price FAR-based contracts and Other Transaction (OT) agreements for research, prototyping, and experimental purposes under authorities such as 10 U.S.C. 3458, 3201, 4021, 4022, and 4023. The procurement process is driven by the issuance of specific Areas of Interest (AoI), which define problem statements, objectives, and submission criteria. Submissions undergo a streamlined, multi-phase evaluation process: Phase I involves a pitch or white paper evaluated on a Go/No-Go basis for strategic alignment and feasibility; Phase II may include an optional oral presentation or demonstration to assess technical viability; and Phase III requires a full commercial proposal evaluated on technical merit, cost reasonableness, and past performance. This CSO is administered by the DHACA Defense Healthcare Management Systems Contracting Division and is designed to prioritize cost-effective, commercially viable solutions to enhance healthcare readiness and patient safety.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

about 1 month ago

DEADLINE

Medical Product SupplierThis subcontract opportunity with the Defense Health Agency under the Department of Defense involves the supply of commercial medical products, devices, and non-developmental items for prime contractors. The scope includes providing off-the-shelf medical consumables and hardware, modifying commercial products to meet specific clinical requirements, and delivering physical prototypes for operational feasibility testing. The contract requires strict adherence to FDA approvals and FAR Part 12 compliance. Performance will be centered in Falls Church, Virginia, under NAICS code 423450. The primary objective is to ensure the delivery of medical hardware and supplies that meet the rigorous standards of the Defense Health Agency.

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Commercial Medical Services ProviderThe Commercial Medical Services Provider subcontract supports the Defense Health Agency within the Department of Defense, specifically operating out of Falls Church. The primary objective is to provide commercially available healthcare services and clinical support functions for prime contractors. This includes the delivery of specialized medical services, the implementation of commercial healthcare delivery models, and the testing of service-based prototypes within DHA facilities. To qualify for this role, providers must maintain professional medical licensing and ensure full compliance with Military Health System healthcare standards. The scope of work focuses on delivering validated service-delivery prototypes and professional medical care under NAICS code 621999.

All Other Miscellaneous Ambulatory Health Care Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Get full access

Join 750+ contractors already using CLEATUS