Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Digital Forensics and Incident Response (DFIR)

Active

State & Local

Response Deadline10/23/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

California Department of State Hospitals

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

CA, USA

Set-Aside

NONE

Documents

This scope was carved out of 96.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

IDEA1496 NuHarbor Monitoring Splunk

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 9

subcontract

Response DeadlineOct 23

Submission deadline

Response Deadline

10/23/2026, 08:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia Department of State Hospitals

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia Department of State Hospitals

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs deep-dive investigations into security breaches for prime contractors on California Department of State Hospitals (DSH) projects. Identifies causes of improper data acquisition and determines triggers for California Civil Code 1798.29/1798.82. Develops corrective action plans to contain breaches. Requires expertise in HIPAA and CCPA. Delivers written breach investigation reports within 10 working days.

Similar Contracts

Same NAICS industry code

LIPTM00417__ENI IPT_NEW TO (FOE)_EXP ISR SUPT_N6523620F3023_SRC_CPFFScientific Research Corporation is awarded a new task order under the Naval Information Warfare Systems agency, specifically through Niwc Atlantic. This contract, identified as a bridge to N6523619D4809, focuses on providing expanded ISR support for the ENI IPT. The work is classified under NAICS code 541690 and utilizes a cost-plus-fixed-fee contract type. The performance of this contract will take place in North Charleston. Administrative oversight is managed by Contracting Officer Lisa R. Matthews and Secondary Point of Contact Shanicqua N. Middleton. The project is listed as a forecast with a posted date of October 11, 2026.

POSTED

DEADLINE

Independent Cost Estimator / Quantity Surveyor

POSTED

DEADLINE

Door Hardware Consultant

POSTED

DEADLINE

Tijuana River Valley Chemical Pollution Impact Investigation: Retrospective Epidemiological Study

Solicitation # 13417

County of San Diego

POSTED

DEADLINE

Healthcare Cybersecurity Compliance ConsultantThe Healthcare Cybersecurity Compliance Consultant subcontract involves performing security validation and compliance auditing for prime contractors working on Central Texas Community Health Center projects. The scope of work focuses on validating safeguards against data exfiltration and insider threats, auditing role-based access controls, and ensuring strict adherence to HIPAA, SOC II, and NIST frameworks for data both at rest and in transit. The successful provider will be responsible for delivering comprehensive security validation reports and official compliance certifications. Qualified candidates must hold CISSP or CISA certifications to meet the technical requirements of the role. This opportunity is categorized under NAICS code 541690 and was posted on October 9, 2026, with a response deadline of November 9, 2026. Interested parties can find further details through the Texas SmartBuy portal under solicitation RFP2026-09-001.

CENTRAL TEXAS COMMUNITY HEALTH CENTER

POSTED

DEADLINE

Third-Party Security Assessment & Compliance AuditorThe Third-Party Security Assessment and Compliance Auditor subcontract for Norfolk County involves providing independent security validation and penetration testing for prime contractors working on municipal projects. The selected provider will utilize specialized toolsets to audit environments for SOC 2 Type II and ISO 27001 alignment, while also verifying PCI DSS compliance for payment gateways. The primary deliverables include formal compliance certification audits and detailed independent penetration test reports. This opportunity is categorized under NAICS code 541690 and was posted on October 9, 2026. Interested parties must submit their responses by the deadline of November 3, 2026. The contract is managed by Norfolk County and focuses on ensuring rigorous security standards across its municipal infrastructure and payment systems.

POSTED

DEADLINE

Regional Demographic and Geographic AnalystThe Region of Waterloo is seeking a Regional Demographic and Geographic Analyst for a subcontracting role to support prime contractors on strategic planning projects. The selected provider will be responsible for conducting targeted demographic and geographic analyses, utilizing regional census data and specialized modeling software to evaluate how local and global trends affect diverse population groups and Area Municipalities. The primary deliverable for this engagement is a comprehensive Geographic and Demographic impact analysis that will be integrated into the final strategic report. Interested parties must submit their responses by October 30, 2026, in accordance with the solicitation posted on October 9, 2026, under NAICS code 541690.

Region of Waterloo

POSTED

DEADLINE

R--Technical Services Support

Solicitation # 89243126RSC000172

The Department of Energy Office of Science is soliciting a single contractor to provide comprehensive technical security support services in Oak Ridge, Tennessee. This 8(a) set-aside contract, under NAICS code 541690, supports the Office of Safety and Security, the Office of Science Consolidated Service Center, and the Oak Ridge Office of Environmental Management. The primary mission is to implement and administer Safeguards and Security programs to protect critical national security assets, including personnel, information, and Category I-IV Special Nuclear Material. The scope of work encompasses personnel security, industrial security, information security, and general program support, with a specific requirement to administer the personal identity verification and credentialing program under Homeland Security Presidential Directive-12. The contractor is required to provide experienced management, including a Program Manager designated as Key Personnel, and must implement a comprehensive Quality Control Plan subject to government review and approval. All personnel must obtain and maintain appropriate access authorizations and adhere to strict protocols for handling classified information and Controlled Unclassified Information, such as UCNI, ECI, PII, and OUO. Performance must comply with all applicable DOE directives and federal, state, and local laws. The contractor is also responsible for maintaining a federally mandated Worker Safety and Health Program and providing regular activity reports to the Contracting Officer's Representative.

Sc Oak Ridge Office

POSTED

DEADLINE

FY27 - EXPERT REVIEW BOARS

Solicitation # FY27-EXPERT-REVIEW-BOARDS

The Department of Agriculture, through the Risk Management Agency (RMA), is issuing a Sources Sought Notice to identify qualified private sector entities for addition to a general pool of Blanket Purchase Agreements (BPAs). The objective is to secure independent reviewers with specialized expertise as actuaries or underwriters to evaluate insurance policies, plans of insurance, and related modifications. These services are critical for ensuring the proper functioning of insurance programs and include providing actuarial services related to loss adjustment and rating plans, all performed in accordance with the Federal Crop Insurance Act and relevant statutory authorities under 7 USC Chapter 36 and 7 USC 1508. Interested respondents must demonstrate technical competence in financial implications of future contingent events for actuarial roles, or experience in insurance policy design and risk classification for underwriting roles. Submissions must include basic company information such as CAGE Code, SAM UEI number, and active SAM status, along with a detailed capability statement and identification of business size and socioeconomic category. Responses are due by September 30, 2027, and should be submitted via email to the designated Contract Specialist and Contracting Officer. This effort is categorized under NAICS code 541690 and is managed by the Fpac Bus Cntr-Acq Division in Washington, DC.

Fpac Bus Cntr-Acq Division

POSTED

DEADLINE

(607) Water Staining Testing at the William S. Middleton Memorial Veterans Hospital

Solicitation # 36C25227AP0497

The Department of Veterans Affairs Great Lakes Acquisition Center intends to award a sole source, firm fixed price contract to Phigenics, LLC for Performance Qualification validation testing at the William S. Middleton Memorial Veterans Hospital in Madison, Wisconsin. The scope of work includes providing all necessary resources for ST108 critical and utility water chemistry panels, microbiological analysis, shipping, laboratory testing, and reporting under NAICS code 541690. This procurement is being conducted under the authority of 41 U.S.C. 1901 simplified acquisition procedures. While the government intends to negotiate exclusively with Phigenics, LLC, other firms may submit capability statements and supporting evidence of their ability to meet the requirements to the Contract Specialist by October 14, 2026, at 10:00 AM CST. The final decision to compete the procurement remains at the sole discretion of the government.

252-NETWORK Contract Office 12 (36C252)

POSTED

DEADLINE

Community Health Immunization Resources

Solicitation # 75H70427Q00002

The Indian Health Service is soliciting quotes for the development of Community Health Immunization Resources under RFQ 75H70427Q00002. This requirement is a 100% set-aside for Indian Small Business Economic Enterprises (ISBEE) under the Buy Indian Act. The project focuses on creating culturally appropriate immunization education materials and toolkits for Community Health Workers and Representatives serving American Indian and Alaska Native populations. Key tasks include conducting community interviews, designing communication tools such as posters and videos, translating materials into five languages, and hosting these resources on a website. The performance period runs from October 21, 2026, to July 31, 2027. The government will award a firm-fixed-price purchase order using a comparative best-value approach under FAR Part 12, where non-price factors are significantly more important than price. Evaluation criteria include the technical approach, relevant experience from the past five years, and price reasonableness. Payments are milestone-based, with 30% due upon completion of Objective 1 by March 31, 2027, 30% for Objective 2 by May 14, 2027, 20% for Objective 3 by July 16, 2027, and a final 20% upon acceptance of the final project report and resource package by July 26, 2027. A separate reimbursable line item for travel is capped at 10,000 dollars. Quotes must be submitted in two separate PDF volumes, technical and price, to the designated point of contact by 5:00 pm Eastern Time on October 13, 2026.

Division Of Acquisitions Policy Hq

POSTED

DEADLINE

Citywide Safety Consultation and Training

Solicitation # RFP-00113

The City of Modesto is soliciting proposals under RFP-00113 for Citywide Safety Consultation and Training services to support the Finance Department. The selected consultant will provide comprehensive occupational health and safety services, including the development of written safety programs, delivery of safety training via various formats, and industrial hygiene consultations. All services must comply with California Code of Regulations Title 8, OSHA, FMCSA, DOT, NFPA, and EPA standards. Key deliverables include editable safety documents in Microsoft Word and a rolling twelve-month schedule for training and inspections. The contract is structured for an initial two-year term starting May 3, 2027, with three optional one-year extensions for a total potential duration of five years. Proposals are due by October 13, 2026, via the OpenGov Procurement portal and will be evaluated on a 100-point scale focusing on technical approach, personnel qualifications, firm experience, and references. Awardees must maintain a City of Modesto business license and specific insurance coverages, including Professional Liability of at least 2 million dollars and Workers Compensation as required by the State of California. Payment options include Net 30 terms via a virtual Mastercard or Net 45 terms via manual check, with monthly invoicing required.

POSTED

DEADLINE

More opportunities from California Department of State Hospitals

Same awarding agency

Managed Security Monitoring (SOC Analyst Services)

Other Computer Related Services

POSTED

DEADLINE

Splunk Security Content Development & Engineering

Computer Systems Design Services

POSTED

DEADLINE

IDEA1496 NuHarbor Monitoring Splunk

Solicitation # 96

The California Department of State Hospitals is soliciting a one-year remote managed service agreement for Splunk Enterprise Security, supporting up to 100 SVC. The selected vendor will be responsible for implementing security use cases based on the client's threat profile and monitoring system health and security alerts. Key deliverables include biweekly status reports, quarterly performance meetings, and written breach investigation reports delivered to the Chief Information Security Officer and Chief Privacy Officer within ten working days of discovery. All service requests are managed through the vendor's JIRA service desk, and the vendor may utilize proprietary or third-party software to meet these obligations. The contract is awarded based on the lowest net cost quotation, with a 5 percent evaluation preference for California-certified small businesses or non-small businesses with 25 percent small business subcontractor participation. Additional incentives are provided for Disabled Veteran Business Enterprise participation ranging from 3 to 5 percent. Payment terms follow Government Code section 927, with licenses paid annually, hardware maintenance paid monthly in arrears, and warranties paid in full. Due to the nature of the work, the contractor must adhere to strict confidentiality and security standards, including HIPAA, CCPA, and NIST SP 800-63 authentication requirements.

Other Computer Related Services

POSTED

DEADLINE

I-1270 SkillBridge Program

Solicitation # I-1270

POSTED

DEADLINE

Records Storage Container SupplyThis subcontract agreement involves the supply of archival-grade storage boxes for prime contractors working on projects for the California Department of State Hospitals in Napa. The scope of work requires the delivery of physical containers in various sizes, including standard, legal transfer, ledger, letter transfer, and odd-size boxes up to 5 cubic feet. All materials must adhere to strict size and durability specifications to ensure the long-term retention of official records. The procurement is categorized under NAICS code 322211 and is managed by the state of California. Interested parties should note that the response deadline is October 20, 2026, with the performance of the contract taking place in Napa.

Corrugated and Solid Fiber Box Manufacturing

POSTED

DEADLINE

Records Inventory and Barcoding ServicesThis subcontract for Records Inventory and Barcoding Services supports prime contractors working on California Department of State Hospitals projects in Napa. The scope of work involves the initial registration and cataloging of records through online data entry, inventory management, and the use of barcode scanners and network databases. The selected provider is responsible for processing new record containers and maintaining strict data entry accuracy in compliance with HIPAA privacy standards. The primary deliverable for this engagement is a comprehensive digital inventory of all stored containers. This opportunity falls under NAICS code 519210 and is managed by the California Department of State Hospitals. Interested parties should note the response deadline of October 20, 2026.

Libraries and Archives

POSTED

DEADLINE

Records Transport and Delivery ServicesThis subcontract for Records Transport and Delivery Services involves the physical pick-up, delivery, and removal of records for prime contractors working on California Department of State Hospitals projects in Napa. The service provider is responsible for executing a variety of delivery tiers, including will-call, standard, rush, and emergency requests, with strict delivery windows ranging from one to five hours. To ensure the security of protected health information, the contractor must utilize secure transport vehicles and maintain full HIPAA compliance. The scope of work specifically includes the timely transport of record containers and the permanent removal of records as required by the agency.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Secure Off-Site Records Storage and RetentionThis subcontract for Secure Off-Site Records Storage and Retention supports prime contractors on Department of State Hospitals Napa projects by providing secure storage for patient protected health information. The selected provider must maintain a facility within 50 miles of DSH-Napa that features 24-hour surveillance and fire prevention systems compliant with NFPA 232. Additionally, the contractor is responsible for managing a comprehensive facility disaster plan that includes remote security and database control to ensure the integrity and availability of stored records. Strict adherence to HIPAA compliance per 45 CFR Part 160 and 164 is required to protect sensitive health data. The contract falls under NAICS code 493190 and involves the secure delivery of stored records. Interested parties should note the response deadline of October 20, 2026, for this California Department of State Hospitals requirement.

Other Warehousing and Storage

POSTED

DEADLINE

26-41105-000 Off-Site Records Storage and Retention Services

Solicitation # 26-41105-000

The California Department of State Hospitals Napa is soliciting bids for off-site records storage and retention services for an anticipated term from November 1, 2026, through October 31, 2029. The selected contractor will be responsible for the secure storage, initiation, retrieval, refiling, and transportation of records containing highly confidential patient protected health information. Services are provided on an as-needed basis with strict delivery timelines ranging from one hour for emergency requests to five hours for standard deliveries. The contractor must utilize a secure facility located within a 50-mile radius of DSH Napa, featuring 24-hour interior and exterior surveillance and fire prevention systems compliant with NFPA 232 regulations. The contract requires the contractor to provide all necessary materials, including various storage box sizes and a bar-coding inventory system. Compliance with HIPAA Privacy and Security rules, 45 CFR Parts 160 and 164, and the California Health and Safety Code is mandatory. Bidders must submit a comprehensive package including thirteen specific attachments, such as a rate sheet, bidder certifications, and insurance documentation, by October 19, 2026. Award will be granted to the lowest responsive and responsible bidder, with specific incentives available for certified Disabled Veteran Business Enterprises and Small Businesses. Special requirements include the procurement of performance and payment bonds not less than the contract price and the potential for personnel to undergo fingerprinting and drug testing. Contractors must also adhere to DSH workplace safety programs, including the use of Personal Protective Equipment and Personal Dress Alarm Systems. Invoicing must be submitted on company letterhead to the Napa accounting office and must include the Standard Agreement Form 213 number and any applicable certification numbers. Performance will be monitored by DSH staff to ensure adherence to professional standards of care and Title 22 regulations.

General Warehousing and Storage

POSTED

DEADLINE

OEM Toner and Printing Supplies ProviderThis subcontract agreement establishes a provider for genuine Original Equipment Manufacturer toner and consumables to support high-volume graphic arts printers for prime contractors working on California Department of State Hospitals projects. The scope specifically covers the provision of Canon OEM toner for IMAGEPRESS C8100 and VarioPrint DP Line 115 hardware, with the provider responsible for managing supply levels to accommodate a volume of up to 172,000 monthly clicks. All materials are to be delivered F.O.B. Destination. The contract falls under NAICS code 423430 and is associated with the California Department of State Hospitals, with a response deadline set for October 13, 2026.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

in about 9 hours

Canon ImagePress and VarioPrint Maintenance ServicesThis subcontract focuses on providing specialized maintenance and technical support for high-volume graphic arts printing equipment, specifically the IMAGEPRESS C8100 and VarioPrint DP Line 115 systems. Serving prime contractors on projects for the California Department of State Hospitals, the provider is responsible for delivering monthly labor and on-site repairs to ensure equipment functionality. To maintain operational integrity and security, the contractor must adhere to PCI data security standards and FIPS 140-2 encryption requirements. Key deliverables include the submission of completed maintenance logs and the achievement of monthly operational availability targets. The contract falls under NAICS code 811210 and is associated with the state of California.

Electronic and Precision Equipment Repair and Maintenance

POSTED

DEADLINE

in about 9 hours

IDEA1466 Graphic Art Printer Support Renewal

Solicitation # 89

The California Department of State Hospitals (DSH) is soliciting quotations for the Graphic Arts Printers Support Renewal under RFQ IDEA1466. The contract covers the period from November 1, 2026, to October 31, 2027, and requires the contractor to provide maintenance, support, and supplies for high-volume Canon equipment, specifically the IMAGEPRESS C8100 and VARIOPRINT DP LINE 115. The scope includes monthly base charges for a set number of color and black-and-white clicks, with additional rates for overages. Award of the purchase order will be granted to the supplier that meets all administrative requirements and provides the lowest net cost quotation, with a five percent bid preference available for California-certified small businesses and qualifying DVBE participants. Contract administration involves specific invoicing procedures where licenses are paid annually, hardware maintenance is paid monthly in arrears, and hardware warranties are paid in full, all under Net 45 terms. The contractor must adhere to strict information privacy and security standards, including the use of FIPS 140-2 certified encryption for handling DSH personal and confidential information. Bidders are required to submit a comprehensive package including a cover sheet, cost table, and various state declarations via the Vendor Submission Portal by October 12, 2026. Additionally, the state requires full disclosure of any Generative AI used in the proposal and specifies that no travel or per diem costs will be reimbursed.

Electronic and Precision Equipment Repair and Maintenance

POSTED

DEADLINE

in about 9 hours

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS