Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Cybersecurity Validation & FedRAMP Compliance

Open
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cybersecurity Validation and FedRAMP Compliance subcontract, managed by the Department of Defense through the Dcso Philadelphia office, focuses on performing security assessments for prime contractors providing IT solutions to the DLA. The scope of work includes conducting vulnerability scans, performing FedRAMP readiness assessments, and developing System Security Plans using specialized security auditing and penetration testing software. The primary objective is to ensure all IT solutions adhere to DoD cybersecurity frameworks and FedRAMP mandates. Key deliverables for this contract include comprehensive security assessment reports, compliance certifications, and detailed risk mitigation plans. The contract is categorized under NAICS code 541519 and remains active through September 17, 2031.

General Info

DoD subcontract for cybersecurity assessments and FedRAMP compliance active through September 17, 2031.

NAICS

541519 - Other Computer Related Services

Place of Performance

PA, USA

Set-Aside

NONE

Documents

This scope was carved out of SP4701-26-B-0004.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Defense Logistics Information Research (DLIR) BAA

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Dcso Philadelphia
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Performs security assessments for prime contractors delivering IT solutions to the DLA. Conducts vulnerability scans, performs FedRAMP readiness assessments, and develops System Security Plans (SSP) using security auditing and penetration testing software. Ensures all solutions comply with DoD cybersecurity frameworks and FedRAMP mandates. Delivers security assessment reports, compliance certifications, and risk mitigation plans.

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
SLED
IFB FTB-2627-00911 Genesys Software Subscriptions and Application Support Services
Solicitation # FTB-2627-00911
The California Franchise Tax Board (FTB) is soliciting bids for the renewal and procurement of Genesys software subscriptions and application support services to maintain its Enterprise-Wide Customer Service Platform II Contact Center Platform (CCP). The scope includes various Genesys products such as Framework, Voice Platform, Reporting, Nuance Speech Recognizer, and Workforce Management, with integrations for Qfiniti and Mindful Callback. Software subscriptions are paid annually in advance, while professional services are billed in arrears on a time-and-materials basis, capped at $20,000.00. Work may be performed at the FTB Central Office in Sacramento or remotely within the United States, with a requirement for 24/7 support availability. The contract will be awarded to the responsive and responsible supplier who meets all mandatory administrative, qualification, and support plan requirements and offers the lowest net cost. Bidders must submit mandatory documentation, including minimum qualifications, a support plan, a resume shell, and a confidentiality statement. Evaluation includes preferences for California Small Businesses and Disabled Veteran Business Enterprises (DVBE), though the DVBE program is waived for this solicitation while the incentive remains. All deliverables must comply with WCAG 2.1 Levels A and AA accessibility standards and be provided in MS Word, PDF, PowerPoint, and CSV formats. Final bids are due by November 24, 2026.
Franchise Tax Board

POSTED

about 14 hours ago

DEADLINE

in about 2 months
View Details
NAICS: 541519
New
International
Microsoft Support Services
Solicitation # 1220-030-2026-064
The City of Surrey is soliciting proposals for Microsoft Support Services under solicitation number 1220-030-2026-064. The scope of work involves providing all labor and services necessary to support a suite of technologies, including Microsoft 365, SharePoint Online, Power Platform, Dynamics 365, and Windows Server. The service model is based on providing 100 support incidents per year, with a limit of five critical or severity-A responses, while the remaining incidents cover standard operational, administration, configuration, troubleshooting, advisory, and support requests. Proponents must define their standards for response times, available support hours, and communication channels via a support portal. To qualify, proponents must be enrolled in and maintain good standing with the Microsoft Premier Support for Partners program. Required certifications include Workers Compensation Board coverage, a City of Surrey or Intermunicipal business license, and registration with the Registrar of Companies in British Columbia. Proposals must include a comprehensive set of schedules covering the proposed agreement, statement of departures, experience and resources, technical services, and a financial proposal. Payment terms are generally based on a net 30-day basis. The procurement process is managed by Sunny Kaila, Manager of Procurement and Payables, with submissions handled through the BC Bid and City websites.
City of Surrey

POSTED

about 19 hours ago

DEADLINE

in 21 days
View Details
NAICS: 541519
New
Federal
6515--KitCheck RFID Crash Carts - Sources Sought
Solicitation # 36C24427Q0051
The VA Pittsburgh Healthcare System is conducting market research through a Sources Sought Notice to identify potential providers for a KitCheck RFID Tag System for crash cart medication scanning. This system, developed by Bluesight Technologies, is designed to improve patient safety and operational efficiency by using a central module and RFID tags to prevent medication waste, stockouts, and inaccuracies while accelerating restocking and recall management. The requirement is scaled for 146 staffed beds and includes the acquisition of an RFID module, a yearly software and analytics subscription, RFID tags, scanning station barcode readers, and comprehensive training and support. The scope of work encompasses both remote and onsite implementation, with a requirement that installation be completed within four months of a potential contract award. The system must be BAA/TAA compliant and include a standard warranty for parts and labor. Interested parties must submit a capability statement of no more than 10 pages by November 17, 2026, including their UEI number, CAGE code, and business size status under NAICS 541519. Respondents must also provide evidence of being an authorized distributor of the Original Equipment Manufacturer and detail their compliance with the non-manufacturer rule. This action is for information and planning purposes only and does not constitute a formal solicitation.
244-NETWORK Contract Office 4 (36C244)

POSTED

1 day ago

DEADLINE

in 7 days
View Details

More opportunities from Department Of Defense → Dcso Philadelphia

Same awarding agency

NAICS: 541715
Federal
Commercial Solutions Opening (CSO)
Solicitation # SP4701-27-S-C001
The Defense Logistics Agency (DLA) has established a Commercial Solutions Opening (CSO) framework running from 2026 through October 1, 2031, to acquire innovative commercial technologies, products, and services. Operating under 10 U.S.C. 3458 and DFARS Subpart 212.70, the DLA will solicit Solution Briefs on a rolling basis in response to published Areas of Interest (AOIs) that describe specific capability gaps or technical challenges. All resulting awards must be fixed-price, and the government may utilize Other Transaction (OT) Agreements for prototype projects under 10 U.S.C. 4022 or FAR Part 12 procedures for commercial products and services. Successful prototype projects may lead to non-competitive follow-on production contracts. Interested offerors must submit an unclassified Solution Brief not exceeding eight pages, with an optional two-page narrative or five-slide executive summary. Submissions are evaluated based on technical feasibility, importance to agency programs, and viability, including cybersecurity compliance and alignment with federal policies. The process involves an initial conformance review and funding availability assessment, followed by technical evaluations by subject matter experts. Selected offerors may be invited to a pitch, requested to submit a full proposal, or moved directly to award negotiations. DLA provides no funding for the submission process, and all proposed pricing must remain valid for 180 days.
Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

about 1 month ago

DEADLINE

in almost 5 years
View Details
NAICS: 541715
Federal
Defense Logistics Information Research (DLIR) BAA
Solicitation # SP4701-26-B-0004
The Defense Logistics Information Research (DLIR) Broad Agency Announcement (BAA), solicitation number SP4701-26-B-0004, is a five-year initiative with a $50 million ceiling issued by the DLA Contracting Services Office in Philadelphia. The program seeks innovative research and development solutions to transition the Defense Logistics Agency and its supply base to Industry 4.0 and 5.0 standards. Key technical areas of interest include enhancing industrial base resilience, improving surge and manufacturing capabilities through AI-enabled capacity mapping, and developing public-private partnership frameworks for rapid commercial manufacturing activation. All proposed efforts must align with DLA Strategic Plan priorities and adhere to federal cybersecurity requirements, including FedRAMP awareness. The acquisition process begins with the submission of an abbreviated white paper limited to eight pages. If the government deems the concept of interest, it may request full technical and cost proposals. Technical proposals are limited to 40 pages and are evaluated based on feasibility, viability, desirability, and past performance from the previous three years. Awards may take the form of one-time definitive contracts or Indefinite Delivery, Indefinite Quantity (IDIQ) contracts, with typical CLINs covering short-term projects, working group activities, and optional transition and implementation tasks. Selection is primarily based on technical importance to agency programs and funding availability, with a separate cost realism analysis performed to ensure fair and reasonable pricing.
Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

about 2 months ago

DEADLINE

in almost 5 years
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS