Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, July 22 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Data Security & Compliance Assessment Services

Active

State & Local

Response Deadline07/20/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the performance of comprehensive compliance reviews focused on data handling practices, specifically auditing adherence to HIPAA, CJIS, IRS Publication 1075, and Massachusetts privacy regulations. The scope includes the development or validation of Written Information Security Programs to ensure alignment with state and federal standards for protecting sensitive information. All work must be performed in Boston, Massachusetts, under the oversight of the Executive Office of Technology Services and Security. The solicitation is structured as a subcontract with a NAICS code of 541611, indicating professional, scientific, and technical services related to administrative management and general management consulting. Proposals must be submitted by the deadline of July 20, 2026, and the opportunity was posted on June 15, 2026, with no set-aside designation specified.

General Info

Compliance reviews in Boston for HIPAA, CJIS, IRS 1075, and MA privacy; WISP development; subcontract due July 20, 2026.

Agency

Massachusetts → ITD0001 - Executive Office of Technology Services and SecurityView Agency

NAICS

541611 - Administrative Management and General Management Consulting ServicesView NAICS

Place of Performance

Boston, MA, 02108, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJun 15

subcontract

Response DeadlineJul 20

Submission deadline

Response Deadline

07/20/2026, 08:00:00 PM UTCin 2 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyMassachusetts → ITD0001 - Executive Office of Technology Services and Security

ContactsNo contacts available

OfficeN/A

Organization / Agency

Massachusetts → ITD0001 - Executive Office of Technology Services and Security

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Perform compliance reviews for data handling practices, including audits for HIPAA, CJIS, IRS Pub 1075, and Massachusetts privacy laws. Develop or validate Written Information Security Programs (WISP).

Similar Contracts

Same NAICS industry code

Prevention Planning Consultation ServicesThe County is seeking to implement the Family First Prevention Services Act by building a comprehensive, integrated prevention system that shifts focus from foster care placement to early, evidence-based services for children at risk and their families, including pregnant and parenting foster youth and kin caregivers. This initiative aims to expand the use of Title IV-E funding to support voluntary, preventive interventions that strengthen family stability and reduce reliance on foster care, requiring alignment with federal guidelines and California Department of Social Services requirements. The County is developing standardized processes for identifying eligible families, determining candidacy for services, documenting interventions, and claiming federal reimbursement, while also integrating existing programs with new requirements under CWS-CARES and braided funding strategies to maximize available resources. A key component includes designing Community Pathways that ensure equitable, accessible entry points to services and fostering collaboration among county departments and community providers. To support this complex transition, the County is contracting for expert technical consultation to guide the design and implementation of operational frameworks, including referral and intake systems, fiscal claiming methodologies, quality improvement structures, workforce development plans, and policy documentation. The consultant will provide strategic advice on compliance with evolving federal and state mandates, assist in building sustainable systems for long-term administration, and help ensure fidelity to evidence-based models. While the County retains full authority over policy and operational decisions, the consultant’s role is critical in bridging gaps in expertise, facilitating stakeholder engagement, developing tools and training resources, and aligning local efforts with statewide initiatives. The project is time-bound, with a specified proposal deadline, and seeks a qualified provider with deep knowledge of California’s child welfare infrastructure, Title IV-E Prevention requirements, and practical experience in implementing prevention systems at the county level.

Human Services Agency - Children and Family Services

POSTED

about 11 hours ago

DEADLINE

Strategic Planning & Operational Optimization for Food Product Development CentersA subcontract has been issued by Alcorn State University to develop a strategic roadmap and operational framework aimed at transforming the PDC into a sustainable food product development and business incubation center. The initiative requires a comprehensive approach including detailed market analysis to identify industry trends, consumer demands, and competitive positioning, alongside the creation of robust business models that support innovation, scalability, and long-term viability. The contractor will be responsible for designing revenue strategies that ensure financial sustainability through diversified income streams such as product licensing, shared facility usage, client services, and partnerships with local agriculture and food enterprises. The operational framework must integrate efficient workflows, resource allocation systems, and performance metrics to support startups and entrepreneurs in bringing food products from concept to market. Emphasis will be placed on building capacity for research and development, quality assurance, packaging, distribution, and regulatory compliance within the center. The work is scoped under NAICS code 541611 and is set to be responsive by August 10, 2026, with the agreement being administered under the auspices of Mississippi’s state-affiliated procurement processes. The project is non-competitive and does not include a set-aside designation, allowing qualified entities to submit proposals under standard subcontracting guidelines.

ALCORN STATE UNIVERSITY

POSTED

about 15 hours ago

DEADLINE

Subcontract Management & Flow-Down ComplianceThe contract mandates strict compliance with DFARS 252.204-7012 requirements, ensuring that all subcontractors adhere to federal cybersecurity standards for safeguarding covered defense information and implementing adequate security controls. Subcontractors are required to properly flow down these cybersecurity obligations to any lower-tier subcontractors, maintaining an unbroken chain of compliance throughout the supply chain. This obligation applies to all subcontracting activities under the contract, with the Defense Logistics Agency enforcing adherence as part of its broader commitment to protecting sensitive defense data. The contract falls under NAICS code 541611, indicating it relates to management consulting services supporting defense operations, and is governed by the Department of Defense. Although specific performance locations and point of contact details are not provided, the contract is active through the DIBBS platform with a posted date of July 17, 2026, and is structured as a subcontract award. All parties involved must demonstrate ongoing alignment with the cybersecurity framework outlined in DFARS 252.204-7012, including incident reporting, system monitoring, and documentation of protective measures to ensure the integrity and confidentiality of controlled unclassified information.

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

Proposal and Compliance Documentation SupportThe contract seeks support for the preparation of all necessary proposal documents required for submission to the Defense Logistics Agency in response to a solicitation set aside exclusively for small businesses under the SBA Total Small Business Set-Aside provision. The scope includes developing the Proposal Investment Document, pricing spreadsheet, Capability Assessment Package, and all requisite representations and certifications to ensure full compliance with federal contracting requirements. The work must be completed and submitted by the response deadline of August 21, 2026, with the solicitation originally posted on July 17, 2026. The contract falls under NAICS code 541611, indicating it is for management consulting services, and is classified as a subcontract under the Department of Defense’s Strategic Acquisition Program Directorate, though no specific place of performance or point of contact is provided. All deliverables must align with DLA standards and federal acquisition regulations to qualify for consideration.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

about 16 hours ago

DEADLINE

in about 1 month

Subcontracting Plan Development and Small Business OutreachThe contract requires the development and execution of a comprehensive subcontracting plan aimed at achieving small business participation goals as mandated by the Small Business Administration. This includes targeted outreach and engagement with Women-Owned Small Businesses, Service-Disabled Veteran-Owned Small Businesses, HUBZone firms, and other Small Disadvantaged Businesses to ensure meaningful involvement in the project. The effort must align with the Total Small Business Set-Aside classification under FAR 19.5, which reserves the entire contract for small business concerns, and is tied to the NAICS code 541611, indicating the work involves management consulting services. The plan must outline specific strategies, measurable targets, and methods for identifying, connecting with, and awarding subcontracting opportunities to eligible small businesses across the nation. The solicitation, issued by the Strategic Acquisition Program Directorate within the Department of Defense, is open for responses until August 21, 2026, with proposals due by 5:00 PM Eastern Time. All work under this contract will be performed in accordance with federal subcontracting regulations, with the successful contractor expected to demonstrate not only compliance but also proactive and documented efforts to foster small business growth and inclusion. The absence of specific geographic performance location details suggests that the subcontracting activities may be nationwide, requiring a national network of small business partners and robust tracking mechanisms to verify participation and report outcomes to federal oversight entities.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

about 16 hours ago

DEADLINE

in about 1 month

Subcontract Management and Small Business ParticipationThe contract titled Subcontract Management and Small Business Participation requires comprehensive support for small business subcontracting compliance, outreach, and reporting in accordance with the Federal Acquisition Regulation and Enclosure #8. The contractor is responsible for ensuring all small business participation goals are met through proactive identification, engagement, and monitoring of small business subcontractors, while maintaining accurate documentation and submitting required reports to satisfy federal oversight standards. This includes implementing strategies to maximize opportunities for small businesses across all phases of subcontracting activities. The work is associated with the NAICS code 541611 and is managed by the Defense Logistics Agency under the Department of Defense. The contract is classified as a subcontract with no specified set-aside type and is linked to the award SPE7LX22D0068 with delivery order SPE7L126FAU5E. Although the place of performance and point of contact details are not provided, the contract mandates adherence to federal compliance standards and focuses on fostering small business involvement throughout the supply chain to meet DLA’s socioeconomic objectives.

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

Canadian-Based Contract Administration and Compliance Support

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

Regulatory Compliance and Invoicing SupportThe contract involves providing regulatory compliance and invoicing support services under a subcontract with the Defense Logistics Agency, a department of the Department of Defense, focusing on adherence to federal acquisition regulations and labor standards. Key responsibilities include ensuring all documentation aligns with DLA Form 2505 requirements, maintaining complete and accurate audit records to facilitate inspections and reviews, and guaranteeing compliance with prevailing wage laws and applicable FAR clauses throughout the performance period. The work is associated with NAICS code 541611, indicating an emphasis on management consulting services, and is tied to contract SP450025D0015 with delivery order SP450026F6508, though the precise location of performance is not specified. This contract obligates the subcontractor to uphold strict procedural and financial controls to ensure transparency, regulatory integrity, and lawful labor practices, with all activities subject to federal oversight and potential audits.

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

Defense Logistics Compliance & Shipment Labeling ServicesThis contract requires the provision of Defense Logistics Agency compliance services centered on MIL-STD-129 compliant labeling for military shipments, ensuring all packaging and container markings adhere to standardized military specifications. The contractor must generate shipping labels through the Defense Logistics Agency’s Vendor Shipment Management system, integrating seamlessly with DLA’s logistical infrastructure to support accurate and timely delivery tracking. In addition to labeling, the contractor is obligated to submit Shipment Information Reports through the PIEE platform to coordinate with the Defense Contract Management Agency, enabling real-time visibility and regulatory compliance across the supply chain. The work is performed as a subcontract under the North American Industry Classification System code 541611, supporting Department of Defense logistics operations with an emphasis on precision, security, and adherence to federal shipping protocols.

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

DEI Compliance and Reporting Administration

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

Small Business Subcontracting & Reporting SupportThe contract supports compliance with small business subcontracting plans and federal reporting requirements under the Defense Logistics Agency, part of the Department of Defense. It is categorized under NAICS code 541611, indicating services related to management consulting, and is structured as a subcontract. The primary objective is to ensure adherence to federal regulations governing the utilization and reporting of small business participation in government contracts, including accurate tracking, documentation, and submission of required metrics to maintain compliance. The contract does not specify a set-aside designation, suggesting it is open to all eligible subcontractors meeting the compliance obligations. Performance obligations are tied to federal reporting frameworks without a defined geographic location, implying that services may be administered remotely or across multiple defense logistics sites. The contract was posted on July 17, 2026, with an associated award identifier that enables tracking through the DIBBS system. While no point of contact or physical place of performance is listed, the technical focus centers on providing expert support to meet federal subcontracting goals, ensuring transparency and accountability in small business participation across Department of Defense contracting activities.

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

Supply Chain Compliance & Reporting ServicesThe contract entails ongoing monitoring and reporting services to ensure compliance with federal regulations including the Federal Acquisition Streamlining Act (FASCSA), the Trade Agreements Act (TAA), and the Defense Federal Acquisition Regulation Supplement (DFARS) as they pertain to telecommunications prohibitions. The work is focused on maintaining adherence to restrictions on the use of telecommunications and video surveillance services from specified foreign entities, requiring systematic evaluation of supply chains, identification of non-compliant components, and timely documentation to meet federal obligations. This subcontract supports the Defense Logistics Agency’s mission to safeguard the integrity of defense acquisitions by preventing the use of compromised technologies within critical infrastructure. The contract is issued under NAICS code 541611 for Management Consulting Services and is associated with the Department of Defense through the Defense Logistics Agency. It is not subject to a specific set-aside designation, and performance is expected to be conducted wherever necessary to fulfill federal compliance requirements without geographic restrictions. The solicitation is linked to contract numbers SP330025D0006 and SP330026F0869, and all activities must be executed with precision to ensure audit readiness and alignment with evolving regulatory standards governing secure communications and supply chain integrity.

Defense Logistics Agency

POSTED

about 16 hours ago

DEADLINE

More opportunities from Massachusetts → ITD0001 - Executive Office of Technology Services and Security

Same awarding agency

RFQ 27-05430 for AWS Hosting and Related ServicesThe solicitation seeks qualified vendors to provide AWS resale, hosting, managed services, and related professional services under RFQ 27-05430, with responses due by September 16, 2026. Only entities awarded ITS88 Category 1 or Category 2 status are eligible to submit bids, ensuring that only pre-vetted providers with demonstrated capability in state IT procurement may participate. The contract is issued by the Executive Office of Technology Services and Security under the Commonwealth of Massachusetts, with the primary point of contact being Nelson Wong, Purchaser, reachable at 617-626-4553. All services must be performed in Boston, Massachusetts, with the contract opportunity posted on the state’s Commbuys portal and no set-aside classification applied. Bid submissions must comply with all technical and procedural requirements outlined in the full solicitation document.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 12 hours ago

DEADLINE

RFQ 27-05430 for AWS Hosting and Related ServicesThe solicitation seeks bids for Amazon Web Services resale, hosting, managed services, and associated professional services under RFQ 27-05430, with the solicitation number BD-27-1060-ITD00-ITD00-131373. Only vendors awarded ITS88 Category 1 or Category 2 status are eligible to respond, ensuring that only pre-qualified providers may participate. The request is issued by the Executive Office of Technology Services and Security within the Commonwealth of Massachusetts, with the office located in Boston, MA, and all services expected to be performed at the same location. The solicitation was posted on July 17, 2026, and all responses must be submitted by September 16, 2026, at 8:00 PM Eastern Time. For inquiries or further information, the primary point of contact is Nelson Wong, Purchaser, reachable at 617-626-4553. The full details and submission portal can be accessed via the provided UI link to the CommBuys platform.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 12 hours ago

DEADLINE

On-Premises IT Implementation & Systems Integration SupportThe contract seeks qualified vendors to deliver technical services for deploying and integrating systems on-premises at the agency’s location in Boston, Massachusetts, with a postal code of 02108. Services include system configuration, data migration, and user training, all performed under task orders issued under the broader agreement. The work is classified under NAICS code 541512, indicating it falls within computer systems design and related services, and is structured as a subcontract opportunity with no specific set-aside designation. The solicitation was posted on June 15, 2026, and responses must be submitted by July 20, 2026, at 8:00 PM. The agency responsible is the Executive Office of Technology Services and Security under the Massachusetts government, and performance is strictly limited to the designated on-site location in Boston.

Computer Systems Design Services

POSTED

about 1 month ago

DEADLINE

Subcontractor Compliance & Third-Party Risk ManagementThe contract requires support to the prime contractor in ensuring subcontractors adhere to stringent security and privacy requirements aligned with EOTSS and federal standards. This includes conducting thorough vetting of prospective subcontractors, drafting and negotiating compliant agreements, implementing ongoing monitoring mechanisms, and producing accurate, timely reporting on compliance status. The scope spans the full lifecycle of third-party risk management, from initial assessment through continuous oversight, with emphasis on safeguarding sensitive government data and systems. Performance is centered in Boston, Massachusetts, with all activities governed by the regulatory frameworks enforced by the Executive Office of Technology Services and Security. The work is critical to maintaining the integrity of state technology infrastructure and requires deep familiarity with federal compliance protocols and state-specific security directives. Subcontractor agreements must be structured to enforce accountability, and any deviations or breaches must be identified, documented, and remediated promptly to uphold operational security and regulatory standing.

Other Management Consulting Services

POSTED

about 1 month ago

DEADLINE

Strategic IT Consulting & Roadmap DevelopmentThe contract seeks strategic advisory services focused on enhancing IT governance, ensuring technology initiatives are closely aligned with organizational objectives, and creating detailed long-term implementation roadmaps. The work will involve conducting stakeholder interviews to gather insights, performing comprehensive gap analyses to identify current deficiencies, and developing future-state models that outline scalable, sustainable technology pathways. The services aim to bridge operational gaps and provide actionable guidance for modernizing IT infrastructure and processes within the agency. This subcontract is issued under the NAICS code 541618 for other scientific and technical consulting services and is tied to the Massachusetts Executive Office of Technology Services and Security. Proposals must be submitted by July 20, 2026, with performance expected to center in Boston, Massachusetts, at the 02108 zip code. The engagement is part of a broader effort to strengthen the state’s technology capabilities through expert consultation, with no specific set-aside classification identified. The solicitation was posted on June 15, 2026, and interested parties are directed to the provided online portal for submission details.

Other Management Consulting Services

POSTED

about 1 month ago

DEADLINE

IT Project Health Assessment & Maturity EvaluationThe contract involves conducting comprehensive technical and managerial assessments of ongoing IT projects to evaluate their health and maturity, with a focus on risk analysis, schedule adherence, budget tracking, and governance effectiveness. The work requires delivering structured reports that include detailed findings and actionable remediation recommendations to improve project outcomes and ensure alignment with organizational standards. Assessments must be thorough, data-driven, and tailored to the specific needs of the Massachusetts Executive Office of Technology Services and Security, with results aimed at informing decision-making and enhancing project delivery. Performance is expected to be executed in Boston, Massachusetts, with all deliverables submitted by the response deadline of July 20, 2026. This is a subcontract opportunity classified under NAICS code 541611 for Management Consulting Services, and while no set-aside designation is specified, the work supports state-level technology governance initiatives. The solicitation was posted on June 15, 2026, and potential bidders must respond within the designated timeframe to be considered for award.

Administrative Management and General Management Consulting Services

POSTED

about 1 month ago

DEADLINE

RFQ 27-05307 for Project Health Assessments, Project Management and Strategic Consulting ServicesThe solicitation seeks bids from existing ITS81 vendors for Project Health Assessments, Project Management and Strategic Consulting Services, and Application Development Services under a state contract managed by the Executive Office of Technology Services and Security of Massachusetts. The work is to be performed primarily in Boston, MA, with all meetings and performance activities required on-site unless otherwise agreed. The contract is governed by a Statement of Work framework that establishes deliverables, task orders, and acceptance procedures tied to compliance with stringent data security standards, including IRS Publication 1075, FBI CJIS Security Policy v5.9.2, HIPAA, M.G.L. c. 66A and c. 93H, PCI, and EOTSS Enterprise Information Security Policies. Contractor personnel handling sensitive data such as Federal Tax Information, Protected Health Information, or Criminal Offender Record Information must undergo background checks, receive formal warnings about criminal liability for misuse, and adhere to strict access controls, including unique user IDs and immediate credential revocation upon changes. Subcontractors are fully bound by the same obligations as the prime contractor and require prior written approval for access to protected data, with the prime contractor maintaining full liability for all third-party compliance. The contract allows for amendments to address evolving regulatory requirements, and all data protection obligations survive termination until protected information is securely returned or destroyed. Evaluation of proposals will consider quality of product functionality, proposed approach, resource qualifications, understanding of engagement, and ability to meet timelines, with both technical merit and cost likely influencing award decisions, though specific weights or the exact basis of award are not defined. Invoices must be submitted electronically to ITDInvoices@mass.gov and accompanied by a signed Deliverable Acceptance Form, with no formal Contracting Officer’s Representative or Procurement Contracting Officer named—responsibility rests with Agency Project Managers. The solicitation requires responses via the COMMBUYS portal, with a deadline of July 20, 2026, and restricts submissions to 30 pages for the business and technical response, excluding resumes and technical diagrams. No contract value is specified, as pricing tables remain populated with placeholders, and while small business preference is noted for contracts under $250,000, there is no formal socioeconomic certification requirement included in the submission format. Compliance with federal and state data handling standards is non-negotiable and enforced with potential civil and criminal penalties, including fines up to $5,000 and imprisonment, for unauthorized disclosures.

Other Management Consulting Services

POSTED

about 1 month ago

DEADLINE

RFQ 26-04499 for VMware Licensing

Computer Systems Design Services

POSTED

DEADLINE