Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

DFARS 252.204-7012 Compliance Consultant

Open

SBIR / STTR

Response Deadline12/02/2026, 05:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity with the United States Air Force seeks a compliance consultant to implement and audit cybersecurity controls for prime contractors working on SBIR projects. The primary objective is to safeguard covered defense information by ensuring strict adherence to DFARS 252.204-7012 requirements and NIST SP 800-171 standards. Selected providers will be responsible for delivering critical cybersecurity compliance documentation, including System Security Plans and detailed audit reports. The project is designated as a total small business set-aside under NAICS code 541519, specifically targeting firms with fewer than 500 employees in accordance with SBIR/STTR mandates. Interested parties must submit their responses by December 2, 2026.

General Info

US Air Force seeks small business cybersecurity consultants for DFARS and NIST compliance.

Agency

Department of Defense → United States Air Force

NAICS

541519 - Other Computer Related Services

Place of Performance

Not specified

Set-Aside

SBA

Documents

This scope was carved out of DAF27BX02-NV501.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Battle Damage Indications / Battle Damage Assessment Collection, Aggregation, and Analytics Improvement

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 4

subcontract

Response DeadlineDec 2

Submission deadline

Response Deadline

12/02/2026, 05:00:00 AM UTCin 26 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment of Defense → United States Air Force

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment of Defense → United States Air Force

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implements and audits cybersecurity controls for prime contractors on Department of the Air Force SBIR projects to safeguard covered defense information (CDI). Provides guidance on DFARS 252.204-7012 requirements and NIST SP 800-171 standards. Delivers cybersecurity compliance documentation, System Security Plans (SSP), and audit reports.

Similar Contracts

Same NAICS industry code

Application Maintenance and Break-Fix SupportThis subcontract for Application Maintenance and Break-Fix Support provides essential technical services for prime contractors working on Ohio Department of Transportation software projects. The scope of work focuses on maintaining system uptime for the OHGO platform through continuous performance monitoring, root cause analysis of system failures, and the deployment of emergency patches and hotfixes utilizing application performance monitoring tools. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 24, 2026. Interested parties can find further details and manage the process through the OhioBuys portal.

Dept Of Transportation

POSTED

about 16 hours ago

DEADLINE

Identity, Credentialing, and Access Management (ICAM) Technical OperationsThis 8(a) set-aside subcontract for the Department of the Treasury's Bureau of the Fiscal Service focuses on Identity, Credentialing, and Access Management (ICAM) Technical Operations. The selected provider will deliver operational administration and help desk support for prime contractors, specifically managing PKI, LDAP, SSO, Splunk Vault, and CAIA services. Key technical responsibilities include the integration of SailPoint Identity IQ and Enterprise User Access software, as well as the development of comprehensive ICAM process documentation and the resolution of support tickets. Performance for this contract will take place in Parkersburg, West Virginia, under NAICS code 541519. Personnel assigned to this project are required to hold technical certifications in either Identity Management or SailPoint to ensure the effective delivery of operational ICAM services. Interested parties should note the response deadline of November 16, 2026.

Bureau Of Fiscal Service

POSTED

about 18 hours ago

DEADLINE

Vulnerability Assessment and POAM ManagementThe Vulnerability Assessment and POAM Management subcontract is a Department of the Treasury project for the Bureau of the Fiscal Service, designated as an 8(a) set-aside under NAICS code 541519. The work is centered in Parkersburg, West Virginia, with a response deadline of November 16, 2026. The scope of work involves analyzing vulnerability scan results for prime contractors to provide guidance on closing security issues. Key responsibilities include developing Plan of Action and Milestones documentation, establishing remediation schedules and cost estimates, and performing root cause analysis. The contractor is required to verify closure evidence within GRC tools and deliver completed POAMs and verified remediation documentation.

Bureau Of Fiscal Service

POSTED

about 18 hours ago

DEADLINE

Umano Medical Bed Software SupportThe Umano Medical Bed Software Support subcontract involves providing periodic software enhancements and updates for Umano Medical OOK SNOW ALL Bed systems. This work supports prime contractors on Department of Veterans Affairs facility projects and includes the delivery of updated and verified system software. Services are performed through the remote or on-site installation of software patches and updates utilizing proprietary Umano Medical deployment tools, which requires authorized access to manufacturer software repositories. The contract is associated with NAICS code 541519 and is managed under the Department of Veterans Affairs Network Contract Office 8.

248-NETWORK Contract Office 8 (36C248)

POSTED

about 18 hours ago

DEADLINE

Cybersecurity Sustainment & ATO ManagementThe Cybersecurity Sustainment and ATO Management subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The primary objective is to perform security vulnerability remediation and maintain the Risk Management Framework body of evidence to ensure mobile applications sustain their Authorization to Operate. This work requires remediating vulnerabilities according to DoD policy timelines using government-provided security scanning tools. Key deliverables include updated RMF documentation and detailed vulnerability remediation reports. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 19, 2026.

Defense Health Agency

POSTED

about 18 hours ago

DEADLINE

Cybersecurity & Compliance EngineeringThis subcontract for Cybersecurity and Compliance Engineering supports prime contractors on FBI Enterprise Data Management System projects at Redstone Arsenal. The scope of work focuses on the implementation of critical security measures, including Role-Based Access Control, Multi-Factor Authentication, and automated FISA data minimization marking. The contractor is responsible for developing System Security Plans and Privacy Impact Assessments to facilitate Authority to Operate decisions. The project requires strict adherence to NIST SP 800-53 and FISMA standards to ensure full regulatory compliance. Key deliverables include the provision of security controls and the final attainment of ATO certification. This opportunity falls under NAICS code 541519 and is managed under the Department of Justice.

FBI - Redstone Arsenal

POSTED

about 18 hours ago

DEADLINE

Hand Held Terminals / SOTI Software Requirement

Solicitation # HHT_SOTI

The Defense Commissary Agency (DeCA) is seeking market capabilities through a sources-sought request to establish an end-to-end operational solution for its worldwide enterprise mobile computing fleet. The primary objective is the management of approximately 2,709 Zebra Android Handheld Terminals (HHTs) utilizing the SOTI MobiControl Mobile Device Management (MDM) platform. The scope of work encompasses the provisioning of annual software subscriptions, the deployment and administration of dedicated production and test server environments, and the integration of devices with enterprise retail and warehouse systems. Additionally, the contractor must provide comprehensive depot repair, rapid-exchange warranty administration, and global technical help desk support. Key requirements include the ability to perform turnkey distribution and logistics for all CONUS and OCONUS locations, including secure packaging and customs clearance. The contractor must ensure strict adherence to cybersecurity standards, including Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) support to maintain the system's Authorization to Operate (ATO), with personnel meeting DoD 8140/8570 certifications. The requirement also includes optional life-of-contract technology refreshes for replacement hardware and accessories as equipment reaches end-of-life or end-of-sale status. Interested respondents must be authorized resellers or integrators of the proposed hardware and software, providing new OEM equipment and submitting a capability statement under NAICS 541519 or 541512 by November 9, 2026.

W6QK Acc-Apg Contr Ctr

POSTED

about 18 hours ago

DEADLINE

Department of the Air Force Business and Enterprise Systems (BES) Commercial Solutions Opening (CSO)

Solicitation # FA8771-26-S-C0001

The Department of the Air Force Program Business and Enterprise Systems (BES) has established a multi-year framework via Commercial Solutions Opening (CSO) FA8771-26-S-C0001 to acquire innovative Commercial-Off-The-Shelf (COTS) IT and business solutions. This umbrella solicitation serves as an administrative framework rather than a direct request for proposals, with specific opportunities to be announced through individual open or closed Calls for Proposals published as amendments until March 2, 2030. Awards may be executed as FAR-based contracts or Other Transaction Agreements (OTAs) under 10 USC 2371b. The scope focuses on several key areas, including artificial intelligence, agile methodology, automation, scalability, security, and the reduction of total lifecycle costs of ownership. Eligible participants include traditional and non-traditional defense contractors, research institutions, and both large and small businesses. All offerors must maintain active registration in the System for Award Management (SAM). Evaluation of proposals will be based on the merit of the proposed concept in addressing specific Areas of Interest, focusing on technical soundness, commercial innovation, and price reasonableness, with funds availability serving as a mandatory pass/fail gate. The framework allows for iterative prototyping and the potential for follow-on production contracts, which may be negotiated with or without further competition. While the general framework is open, specific set-asides for small businesses will be determined at the individual call level.

FA8771 Aflcmc Gbk

POSTED

about 18 hours ago

DEADLINE

Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services

Solicitation # W91CRB-27-B-A001

Solicitation W91CRB-27-B-A001 is an 8(a) set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to benefit the Aberdeen Test Center in Maryland. The contractor will provide all necessary personnel, equipment, and non-personal services to establish and maintain Authority to Operate (ATO) and RMF compliance for several key systems, including the ATC Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The scope includes engineering analysis of hardware and software baselines, configuration management support, and architectural design. The period of performance runs from November 23, 2026, to November 22, 2031, consisting of a base year and four option years, with a possible six-month extension through May 22, 2032. The contract is a sealed bid acquisition requiring firm-fixed pricing based on an estimated 2,040 hours per year per labor category, with no allowance for travel or other direct costs. Bids must be submitted electronically by November 12, 2026. Evaluation is based on a pass/fail responsiveness check, which requires at least five years of RMF lifecycle reporting experience and three years of Top Secret environment documentation for the surge position. Key personnel must include a Senior IT Systems Solutions Architect serving as the Contract Manager. Security requirements are stringent, requiring a Secret clearance for most personnel and a Top Secret clearance for the surge position, with all work performed at Aberdeen Proving Ground. Invoicing must be processed through the Wide Area Workflow application.

POSTED

about 18 hours ago

DEADLINE

PMX-281 IT Strategy, Software Modernization, and Digital Decision Intelligence Advisory Subscriptions

Solicitation # N00019-26-RFPREQ-WPM281-0281

Naval Air Systems Command (NAVAIR), through PMX-281, is conducting market research via a Sources Sought Notice to identify capable providers for IT strategy, software modernization, and digital decision intelligence advisory subscriptions. The government intends to satisfy this requirement through an existing DoD Enterprise Software Initiative (ESI) Blanket Purchase Agreement (BPA) and is specifically evaluating whether there are sufficient small business BPA holders or authorized resellers to support a small business set-aside. The scope of work involves providing software engineering and decision intelligence tools, including digital platforms and benchmark data, alongside objective advisory and consulting services to support AI integration and enterprise software architecture for United States Naval Aviation. Key deliverables include one Team Leader license, five Executive Member licenses, five Advisory Member licenses, and on-demand specialized consulting services. Technical requirements specify that software platforms must meet DoD Cloud Computing Security Requirements Guide impact levels, such as FedRAMP Moderate or DoD IL4/IL5. Additionally, personnel providing advisory services must be eligible for Top Secret (SCI) clearances, and all providers must comply with DD Form 254 industrial security requirements and ITAR/EAR export controls. Interested parties must submit a structured capability statement not exceeding eight pages by November 4, 2026, detailing their BPA status, socioeconomic designations, and technical conformance.

Naval Air Systems Command

POSTED

about 18 hours ago

DEADLINE

Fiber Cables and Various Accessories

Solicitation # 80NSSC27946786Q

Solicitation 80NSSC27946786Q is a firm-fixed-price request for quotation issued by the NASA Shared Services Center for the procurement of fiber cables and various network accessories for the Marshall Space Flight Center. The requirement consists of 39 line items from manufacturers such as Prysmian, Panduit, Corning, and Chatsworth, including specific items like 2,000-foot spools of 100 pair 22 AWG PE89 cable. All materials must be listed on the NASA OCIO Approved Products List to ensure compatibility with existing network architectures, cybersecurity requirements, and SCIF accreditation standards. The procurement is open for full competition under NAICS 541519, and all 39 line items must be quoted together. The contract will be awarded to the responsible offeror with the lowest price technically acceptable offer. Quotes are due by November 6, 2026, and must be submitted to Cody Guidry, including the company's SAM CAGE code and two points of contact. Delivery is FOB Destination to Building 4723 in Huntsville, Alabama, with a need-by date of November 2, 2026. The contractor must comply with U.S. export control laws, including ITAR and EAR, and adhere to specific packaging and marking requirements for duty-free entry of supplies.

NASA Shared Services Center

POSTED

about 18 hours ago

DEADLINE

in about 15 hours

JFrog Artifactory Subscription Maintenance

Solicitation # CORHQ-26-Q-0382

Solicitation CORHQ-26-Q-0382 is a firm-fixed-price requirement issued by the Federal Deposit Insurance Corporation for JFrog Artifactory and Xray Enterprise X software subscription maintenance. The period of performance is scheduled from December 8, 2026, to December 7, 2027, with performance located in Arlington, Virginia. The procurement is not a small-business set-aside and utilizes the Lowest Price Technically Acceptable evaluation method, where proposals are rated as either acceptable or unacceptable based on minimum technical requirements and price reasonableness. Following several amendments, the final deadline for quotes is November 10, 2026, at 6:00 p.m. EST. To be deemed responsive, offerors must be the Original Equipment Manufacturer or an authorized JFrog reseller and must submit a complete proposal package including the Price Schedule, Section K representations and certifications, and Pre-Award Supply Chain Risk Management information. Deliverables include product keys, activation codes, and digital certificates submitted electronically to the FDIC. The primary point of contact for this acquisition is Contracting Officer Christina V. Brooks.

POSTED

about 18 hours ago

DEADLINE

More opportunities from Department of Defense → United States Air Force

Same awarding agency

Request for Information - Extended Range Attack Munition

Solicitation # FA865927W0002

The Department of the Air Force is issuing a Request for Information for the Extended Range Attack Munition under NAICS code 336414. This is the first step of a two-step competitive process conducted via Other Transaction Authority. The government is seeking capability statements from interested parties, including small businesses and non-traditional defense contractors, to evaluate technical merit. Only selected respondents from this initial phase will be invited to submit Commercial Solutions Proposals in the second step. Technical requirements for the munition include a 500lb class weapon with a range of at least 250 nautical miles and speeds of 0.6 mach or greater. The system must feature variable fuze options, blast/fragmentation/penetration effects, and a navigation system capable of operating in GPS-degraded and high EMI environments with a CEP 50 within 10 meters. Additionally, the contractor must be able to integrate active seekers, perform transfer alignment with F-16 Block 10/15/20 MLU aircraft, and possess the capacity to deliver over 1,000 units within 15 months of award. Respondents must be able to obtain a Top Secret/SCI Facility Clearance. Submissions are due by November 19, 2026.

Guided Missile and Space Vehicle Manufacturing

POSTED

DEADLINE

Technical Data Package (TDP) and Training DeveloperThis subcontract opportunity with the United States Air Force focuses on the creation of formal technical documentation and training materials for prime contractors. The selected provider will be responsible for authoring the Technical Data Package, system documentation, and Interface Control Descriptions, while also developing comprehensive training packages for operators and administrators. Final deliverables include a complete Technical Data Package, full system documentation, and an executable training plan. The contract is a Total Small Business Set-Aside under NAICS code 541611, specifically targeting firms with fewer than 500 employees. A critical requirement for this engagement is CMMC Level 2 compliance. Interested parties must submit their responses by December 2, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Hybrid-Cloud FinOps SpecialistThis subcontract opportunity for the United States Air Force seeks a Hybrid-Cloud FinOps Specialist to provide technical expertise in integrating FinOps into modeling environments for prime contractors. The selected provider will define cost metrics for both hybrid-cloud and disconnected on-premise architectures while developing predictive logic for lifecycle resource consumption utilizing Azure Cost Management or AWS Cost Explorer. Key deliverables include financial calibration data and specialized cost prediction modules. The project is designated as a Total Small Business Set-Aside under NAICS code 541512, specifically targeting firms with fewer than 500 employees. A critical requirement for this engagement is CMMC Level 2 compliance to ensure the security of sensitive data. Interested parties must submit their responses by December 2, 2026.

Computer Systems Design Services

POSTED

DEADLINE

AI/ML Engineer for System OptimizationThis subcontract opportunity for the United States Air Force seeks an AI/ML Engineer to develop and implement advanced heuristic techniques or machine learning models to optimize complex system behaviors for prime contractors. The scope of work involves building predictive models using TensorFlow or PyTorch frameworks and creating algorithms to calibrate capital and operational expenditures based on empirical data. The primary deliverable is a functional demonstration of these optimization techniques. The project is designated as a Total Small Business Set-Aside under NAICS code 541715, specifically targeting firms with fewer than 500 employees. Interested parties must maintain CMMC Level 2 compliance to be eligible. Responses are due by December 2, 2026.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

MBSE Architect and SysML DeveloperThis subcontract opportunity for the United States Air Force seeks an MBSE Architect and SysML Developer to design and develop a unified modeling environment for prime contractors. The project involves creating executable models using SysML or open standards to integrate system design specifications with simulation software, specifically to predict operational performance and resource consumption. The selected provider will utilize Cameo or MagicDraw to architect environments for both disconnected on-premise and hybrid-cloud configurations, ultimately delivering a functional Unified Modeling Environment and Interface Control Descriptions. The procurement is a Total Small Business Set-Aside under NAICS code 541330, specifically targeting firms with fewer than 500 employees. A critical requirement for this engagement is CMMC Level 2 compliance. Interested parties must submit their responses by December 2, 2026.

Engineering Services

POSTED

DEADLINE

Technical Facility or Equipment Lease/ServiceThis subcontract opportunity, issued by the United States Air Force under the Department of Defense, focuses on the provision of specialized facilities and equipment for prime contractors engaged in SBIR Phase I projects. The scope of work involves granting access to necessary manufacturing facilities, testing equipment, and specialized laboratories required to execute technical volumes, with deliverables consisting of facility usage and associated outputs such as test results. The contract is designated as a Total Small Business Set-Aside under the SBIR/STTR mandate for companies with fewer than 500 employees, falling under NAICS code 532411. Interested parties must submit their responses by the deadline of December 2, 2026, following the posting date of November 4, 2026.

Commercial Air, Rail, and Water Transportation Equipment Rental and Leasing

POSTED

DEADLINE

Technical Research & Development SubcontractorThis subcontract opportunity is for a Technical Research and Development Subcontractor to support prime contractors on Department of the Air Force SBIR Phase I projects. The selected partner will be responsible for conducting specialized research, technical experimentation, and feasibility analyses to validate proposed concepts. Key deliverables include the execution of the technical volume approach, the provision of feasibility data, and the submission of technical reports and contributions to the Contract Data Requirements List. The opportunity is designated as a Total Small Business Set-Aside under the SBIR/STTR mandate, requiring the subcontractor to have fewer than 500 employees. Falling under NAICS code 541715, the project is managed by the Department of Defense for the United States Air Force. Interested parties must submit their responses by the deadline of December 2, 2026.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Independent RF/Photonics Testing and VerificationThis subcontract opportunity is for the Department of the Air Force to provide independent verification and validation services for RF photonics projects. The selected contractor will be responsible for measuring signal integrity, efficiency, and bandwidth, while also performing environmental stress testing for vibration and temperature. To ensure precision, the work must be conducted in certified calibration labs using high-precision spectrum analyzers, and the provider must maintain ISO/IEC 17025 certification. The final deliverables for this engagement include validation data and a formal Independent Test Report. This is a total small business set-aside under NAICS code 541380, specifically adhering to SBIR/STTR mandates for companies with fewer than 500 employees. The solicitation was posted on November 4, 2026, with a response deadline of December 2, 2026. Interested parties can find further details through the Department of Defense SBIR/STTR portal.

Testing Laboratories and Services

POSTED

DEADLINE

High-Frequency Dielectrics and Substrate SupplyThis subcontract opportunity with the United States Air Force involves the supply of specialized low-loss dielectric materials and substrates for RF photonics projects. The scope of work includes the manufacture of high-frequency laminates, specifically ceramic or PTFE-based substrates, that adhere to strict loss tangent and permittivity requirements. The provider is responsible for delivering raw material sheets or pre-cut substrates along with necessary certifications for material purity and tolerance. This is a total small business set-aside under NAICS code 326199, specifically targeting firms with fewer than 500 employees in alignment with SBIR/STTR mandates. The solicitation was posted on November 4, 2026, with a response deadline of December 2, 2026.

All Other Plastics Product Manufacturing

POSTED

DEADLINE

RF Photonics Module Components and IntegrationThis subcontract opportunity with the United States Air Force focuses on the supply and integration of photonic components for RF photonics projects. The scope of work involves developing photonic integrated circuits for RF signal processing, integrating optical-to-electrical conversion components, and performing critical alignment and coupling of fiber optics to antenna feeds. The successful contractor will be responsible for delivering specialized photonic components or fully integrated RF photonics modules, utilizing high-speed modulators and fiber-optic coupling equipment. This is a Total Small Business Set-Aside under the SBIR/STTR mandate, restricted to firms with fewer than 500 employees. The project falls under NAICS code 334220. Interested parties must submit their responses by December 2, 2026.

Radio and Television Broadcasting and Wireless Communications Equipment Manufacturing

POSTED

DEADLINE

Wideband Antenna Design and FabricationThis subcontract opportunity with the United States Air Force focuses on the design and fabrication of high-performance wideband antennas for RF photonics projects. The selected contractor will be responsible for the full development lifecycle, including electromagnetic modeling and simulation, prototyping via additive manufacturing or precision machining, and rigorous testing of radiation patterns, bandwidth, and gain. Technical execution requires the use of anechoic chambers, vector network analyzers, and specialized RF simulation software to deliver physical prototypes and comprehensive performance validation data. The project is designated as a total small business set-aside under NAICS code 334220, specifically targeting firms with fewer than 500 employees in alignment with SBIR/STTR mandates. Interested parties must submit their responses by December 2, 2026. This effort supports prime contractors in delivering critical antenna structures to the Department of Defense.

Radio and Television Broadcasting and Wireless Communications Equipment Manufacturing

POSTED

DEADLINE

Technical Component and Software SupplyThe Technical Component and Software Supply subcontract supports prime contractors on Department of the Air Force SBIR projects by providing specialized hardware, software licenses, and raw materials. The scope of work includes the delivery of COTS components, proprietary software tools, and specialized sensors, all of which must be accompanied by detailed manufacturer quotes and justifications. This opportunity is designated as a Total Small Business Set-Aside under the SBIR/STTR mandate for companies with fewer than 500 employees, falling under NAICS code 423450. The solicitation was posted on November 4, 2026, with a response deadline of December 2, 2026, for the United States Air Force within the Department of Defense.

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS