This Government Contract opportunity from California was posted on August 26, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Risk Assessment and Data Privacy Consulting

Closed

State & Local

Submission Closed09/23/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541519

New

SLED

HID DigitalPersona Support and Maintenance ProviderThis subcontract involves providing ongoing technical support and maintenance for the HID DigitalPersona Premium Package to support prime contractors on projects for the Department of the California Highway Patrol. The scope of work includes executing standard support for 3,300 units, along with co-termed support for additional groups of 3,090 and 732 units across designated performance periods to ensure continuous active coverage. To qualify for this engagement, the provider must hold an Authorized HID Global Support Certification and maintain compliance with GSPD-401 standards. The project falls under NAICS code 541519 and is managed through the state of California's procurement system.

Department of the California Highway Patrol

POSTED

DEADLINE

Data Security & Cybersecurity ComplianceThis subcontract for Data Security and Cybersecurity Compliance supports the Maryland Transportation Authority by implementing and monitoring security protocols for prime contractors involved in debt collection projects. The scope of work focuses on managing data redundancy, backup systems, and disaster recovery processes to ensure operational continuity. To maintain strict adherence to state and federal privacy laws as well as PCI-DSS standards, the contractor will utilize specialized encryption tools and security monitoring software while providing regular security audit reports and comprehensive disaster recovery plans. The opportunity is categorized under NAICS code 541519 and was posted on October 27, 2026. Interested parties must submit their responses by the deadline of December 15, 2026. Further details regarding the procurement process can be accessed through the Maryland eMaryland Marketplace portal.

Maryland Transportation Authority

POSTED

DEADLINE

Tier II-IV Technical Support ServicesThis subcontract opportunity for the Maryland Transportation Authority involves providing Tier II, III, and IV technical support services to assist prime contractors with debt collection projects. The scope of work focuses on performing advanced technical troubleshooting and resolving complex issues related to collection software to ensure consistent system uptime. The selected provider will utilize remote support tools and ticketing systems to deliver software problem solutions and manage technical tickets. This procurement falls under NAICS code 541519, with a response deadline set for December 15, 2026.

Maryland Transportation Authority

POSTED

DEADLINE

IT Integration and Security ConsultingThis IT Integration and Security Consulting subcontract involves providing specialized security auditing and integration services for prime contractors working on City of Pasadena IT projects. The scope of work focuses on configuring Entra ID for single sign-on and ensuring full compatibility with GCC High environments. Additionally, the consultant is responsible for establishing robust security practices for data storage and transit utilizing SharePoint and Entra ID to deliver a fully secured and authenticated system environment. Managed by the Information Technology Department in California under NAICS code 541519, the project requires the delivery of detailed integration reports. Interested parties must submit their responses by the deadline of December 5, 2026.

Information Technology Department

POSTED

DEADLINE

Managed Security Services and Operational SupportThe Managed Security Services and Operational Support subcontract focuses on the ongoing monitoring, policy management, and maintenance of the Palo Alto Panorama environment for prime contractors working on Massport network security projects. The scope of work includes performing critical software updates, managing security rule sets, and providing high-level Tier 2 and 3 technical support to ensure system stability and security. To maintain operational standards, the contractor is responsible for delivering monthly performance reports and ensuring consistent system uptime. This opportunity is associated with the Massachusetts Port Authority under NAICS code 541519, with a response deadline set for November 6, 2026.

Massachusetts Port Authority - Goods & Services

POSTED

DEADLINE

Network Infrastructure Support ProviderThe Network Infrastructure Support Provider subcontract for BMet College focuses on providing technical support and maintenance for refreshed switch architecture. The selected provider will be responsible for monitoring system health, troubleshooting hardware and software failures, and implementing firmware updates through the use of Remote Monitoring and Management tools. To ensure high standards of service, the contractor must hold HPE Aruba support certifications and adhere to strict SLA compliance regarding guaranteed uptime and response times. This engagement requires the delivery of regular maintenance reports to track system performance and stability. Interested parties should note that the response deadline is November 23, 2026. The project falls under NAICS code 541519 and is designed to support prime contractors managing the college's network infrastructure projects.

POSTED

DEADLINE

Cybersecurity Assessment and Penetration Testing ServicesThis subcontract for Cybersecurity Assessment and Penetration Testing Services supports prime contractors on State of Oregon Enterprise Information Services projects through the Department of Administrative Services. The scope of work involves performing comprehensive cybersecurity assessments and simulated attacks, including vulnerability scans, penetration tests, and Red Team/Blue Team simulations. Technical execution requires the use of industry-standard tools such as Nessus, Burp Suite, and Metasploit to identify and mitigate security risks. Qualified providers must hold professional certifications such as CISSP, CEH, or OSCP. Key deliverables for the engagement include a Cybersecurity Assessment Report, a detailed Vulnerability Matrix, and an Exercise After-Action Report. The work is centered in Salem, Oregon, under NAICS code 541519.

Department of Administrative Services

POSTED

DEADLINE

Cisco Network Managed Support and TrainingThe Cisco Network Managed Support and Training subcontract involves providing specialized technical support and knowledge transfer for data centre projects managed by the East Riding of Yorkshire Council. The selected provider will be responsible for troubleshooting, performance tuning, and delivering comprehensive training sessions for internal IT staff specifically focused on the Cisco NX-OS environment. To ensure high-level expertise, the contract requires a Cisco Certified Support Specialist to oversee these operations. Key deliverables include the provision of support logs and training materials, with a primary objective of maintaining consistent network uptime. This long-term engagement is scheduled to continue through July 2034. The opportunity was posted on October 27, 2026, with a response deadline of November 11, 2026, falling under NAICS code 541519.

East Riding of Yorkshire Council

POSTED

DEADLINE

EMS LINQ-Software Maint/Support-CNP

Solicitation # SRC0000037179

The Alabama State Department of Education, Child Nutrition Programs, is soliciting a sole source contract for consolidated software maintenance and support for EMS LINQ applications. This contract ensures uninterrupted service for several USDA food and nutrition programs, including the National School Lunch Program, School Breakfast Program, Summer Food Service Program, Child and Adult Care Food Program, Commodity Supplemental Food Program, Emergency Food Assistance Program, and the Statewide Procurement Program. The scope of work covers ongoing operations for software updates, security patches, hosting services, annual subscriptions, regulatory updates, and technical support for tools such as the SNP, SFSP, and CACFP Core Modules, Cartwheel Meal Counter software, and LINQ FDP. The contract is effective from October 1, 2026, to September 30, 2027, with the possibility of annual renewals for up to five years or until a total contract cost of 25,000 dollars is reached. Price escalations are limited to a maximum of 5 percent of the annual cost and cannot exceed the total contract ceiling. Award evaluation may include cost realism and price reasonableness analysis, and selected suppliers must provide proof of qualifications, professional licenses, and certificates of insurance. Compliance requirements include registration with the Alabama Secretary of State for foreign entities, enrollment in E-Verify, and adherence to state tax laws and the Beason-Hammon Alabama Taxpayer and Citizen Protection Act.

Alabama State Department of Education, Child Nutrition Programs

POSTED

DEADLINE

Managed SOC Monitoring and Incident ResponseThis subcontract for Managed SOC Monitoring and Incident Response, issued by SONI Ltd, requires the provision of continuous 24/7/365 security monitoring and initial incident response services. The selected provider will be responsible for alert triage and the execution of incident response protocols for prime contractors working on SONI Ltd security projects. The scope of work involves integrating telemetry from various sources and operating exclusively within SONI-owned tooling and SIEM environments. Classified under NAICS code 541519, the contract ensures constant vigilance and rapid response to security threats across the organization's digital infrastructure.

POSTED

DEADLINE

MacBook Purchase for GSA

POSTED

DEADLINE

FOMS Cybersecurity and NIST 800-53 ComplianceThe FOMS Cybersecurity and NIST 800-53 Compliance subcontract focuses on providing system information security support for prime contractors on FAA projects. The primary objective is to achieve and maintain federal Authority to Operate (ATO) by developing security documentation based on NIST 800-53 Rev 5, aligning architecture with agency security baselines, and conducting vulnerability assessments. The final deliverable for this engagement is an approved ATO package. This project is managed under the Department of Transportation and will be performed in Oklahoma City. Personnel assigned to the contract must satisfy DOT Order 1600.1F security requirements and be eligible for FAA PIV badging. The opportunity was posted on October 27, 2026, with a response deadline of November 6, 2026, falling under NAICS code 541519.

6973GH Franchise Acquisition Svcs

POSTED

about 23 hours ago

DEADLINE

in 9 days

AI Contract Overview

This subcontract for Cybersecurity Risk Assessment and Data Privacy Consulting is issued by the California Office of the Controller for projects within the City and County of San Francisco. The selected provider will perform annual Cybersecurity Risk Assessments for prime contractors, ensuring that all personally identifiable information and protected health information are safeguarded according to HIPAA and CCPA standards. Additionally, the contractor must ensure that all information and communications technology deliverables meet Revised 508 Standards and WCAG 2.1 Level AA requirements through the use of specialized accessibility testing tools. Qualified personnel for this engagement must hold CISSP or CISA certifications to deliver the required annual risk assessment reports and accessibility compliance certifications. The solicitation was posted on August 26, 2026, with a response deadline of September 23, 2026, falling under NAICS code 541519.

General Info

California Controller seeks certified providers for cybersecurity risk assessments and accessibility compliance consulting.

Agency

California → Office of the Controller

NAICS

541519 - Other Computer Related Services

Place of Performance

San Francisco, CA, USA

Set-Aside

NONE

Documents

This scope was carved out of SFGOV-0000012041.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

CON | RFQ2026-07 Audit Services

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedAug 26

subcontract

Response DeadlineSep 23

Deadline has passed

Submission Closed

09/23/2026, 06:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyCalifornia → Office of the Controller

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia → Office of the Controller

Office AddressN/A

ContactsNo contact information available

Full Description

Performs annual Cybersecurity Risk Assessments (CRA) for prime contractors on City and County of San Francisco projects. Implements safeguards for PII and PHI per HIPAA and CCPA standards. Ensures ICT deliverables conform to Revised 508 Standards and WCAG 2.1 Level AA using accessibility testing tools. Requires CISSP or CISA certifications. Delivers annual CRA reports and accessibility compliance certifications.

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS