Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

FedRAMP High GRC Automation Platform Subscription

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Commerce SspoView Agency

NAICS

518210 - Computing Infrastructure Providers, Data Processing, Web Hosting, and Related ServicesView NAICS

Place of Performance

Washington, DC, 20230, USA

Set-Aside

NONE

Documents

This scope was carved out of GG000000-26-00063.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Cloud-Based GRC / Cyber Risk Compliance Automation Platform (FISMA High SaaS)

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Commerce Sspo
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Commerce Sspo
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Supplies a cloud-based GRC automation platform for prime contractors on Department of Commerce projects. Provides a SaaS environment to automate SSP, SAR, and POA&M generation using AI-assisted drafting and continuous monitoring evidence collection. Requires FedRAMP High authorization, FIPS 140-2/140-3 modules, and Azure Private Link connectivity. Delivers an active software subscription for up to five information systems.

Similar Contracts

Same NAICS industry code

NAICS: 518210
New
Federal
Access to Food and Cosmetic Product and Packaging Databases
Solicitation # FDA-SOL-75F40126Q00341
This firm-fixed-price contract, solicitation number FDA-SOL-75F40126Q00341, provides the FDA with comprehensive technical, management, and support services to access and maintain databases of US food and cosmetic products. The scope includes providing licenses for Gladson (Syndigo) and NeilsonIQ-Mintel systems, ensuring access for up to 200 personnel to high-resolution packaging images and detailed product attributes. Required data includes nutrition and supplement facts labels, allergen information, and verbatim packaging text for at least 400,000 retail food products, 100,000 dietary supplements, and 300,000 cosmetics, with an optional 50,000 restaurant menu items. The contractor must ensure data accuracy exceeds 98% and provide raw data files quarterly via API or secure FTP in formats such as CSV and Excel. The period of performance is 12 months, running from September 29, 2026, to September 28, 2027, with the place of performance located in College Park, Maryland. Key deliverables include a detailed data dictionary, monthly status reports, two annual training sessions, and a final progress report. The contractor is also responsible for project management, technical support during business hours, and adhering to FDA data disclosure clearance procedures for sharing aggregated data with third parties. Award is based on a best-value determination, prioritizing technical capability over price. Performance is monitored through Acceptable Quality Level standards, requiring 100% compliance for accessibility notifications and over 95% accuracy for dataset information and support request responses.
FDA Office Of Acq Grant Svcs

POSTED

about 7 hours ago

DEADLINE

in 7 days
View Details
NAICS: 518210
New
SLED
RFP763-27-090126BS Accreditation/Learning Management System for continuing medical education
Solicitation # A30000-256-2027
The University of North Texas Health is soliciting competitive proposals for the implementation, configuration, and support of an enterprise-level Accreditation/Learning Management System (LMS) for Continuing Medical Education and Professional Development. The system must support the delivery of live, enduring, and regularly scheduled series programs while ensuring compliance with all applicable accreditation requirements and providing mobile-friendly access. Key deliverables include the migration of course, learner, and credit data, as well as the streamlining of administrative processes to improve learner engagement. The resulting contract will feature an initial one-year term with four renewal options. Proposals are due by October 15, 2026, and must be submitted electronically via the EPRO system using the Chrome browser. Award decisions will be based on best value, considering factors such as purchase price, vendor reputation, quality of services, and the extent to which the solution meets the institution's needs. Mandatory requirements for proposers include holding a TX-RAMP Level 2 or Provisional certification, providing resumes for key personnel, and submitting a signed Affirmation and Conflict of Interest Disclosure. Additionally, a HUB Subcontracting Plan is required if the total contract value is expected to exceed 100,000 dollars.
University of North Texas System

POSTED

1 day ago

DEADLINE

in 27 days
View Details
NAICS: 518210
New
International
TfGM - Cloud Public Address System
Solicitation # DN 824859
Transport for Greater Manchester is seeking to procure a secure, resilient, and IP-based Cloud Public Address (PA) system and associated services to be deployed across its Transport Service Facilities in Greater Manchester. The project involves implementing a cloud-hosted management system with main and failover capabilities to facilitate real-time passenger information, safety and security messages, and event-driven announcements. The system must support dual-level operation, allowing for centralized control from the Operations Control Centre and local management by site coordinators. Key technical requirements include integration with an on-net estate of end-user devices such as IP speakers, audio gateways, and paging stations, as well as the ability to interface with legacy Long Line Public Address systems and third-party platforms like Cisco Unified Call Manager. This procurement is being conducted as an Open Tender procedure in accordance with the Procurement Act 2023 to ensure maximum market competition, with particular suitability noted for small and medium-sized enterprises. The estimated contract value is £871,000 including VAT, covering a seven-year performance period from 1 April 2027 to 31 March 2034. The contract includes provisions for additional purchases and the expansion to further site locations during its term. Evaluation of bids will be based on a weighted scoring system consisting of 50% Technical quality, 40% Cost, and 10% Social Value. Interested parties must submit their electronic proposals in English via the ProContract portal no later than 30 October 2026 at 4:00pm.
Transport for Greater Manchester

POSTED

1 day ago

DEADLINE

in about 1 month
View Details

More opportunities from Department Of Commerce Sspo

Same awarding agency

NAICS: 236220
New
Federal
Table Mountain T1 and B9 Renovation
Solicitation # 1331L526TBRENOVAT
The Department of Commerce, on behalf of the NTIA Institute for Telecommunications Sciences, is soliciting a firm-fixed-price contract for the renovation of buildings T1 and B9 at the Table Mountain Field Site in Longmont, Colorado. This project is a 100 percent small business set-aside under NAICS 236220. The scope of work requires a design-build approach prior to construction, with a period of performance not to exceed two years from the date of award. Key renovations for building T1 include HVAC and electrical panel upgrades, window and door replacement, new flooring, roof and deck replacement, and interior and exterior painting. Building B9 requirements include ADA-compliant bathroom remodeling, a high-efficiency electric HVAC system, 3-phase electrical panel upgrades, floor polymer coating, roof gutter repair, and the use of Rhino shield elastomeric coating for painting. The contractor must also manage asbestos-containing adhesives found in the interior walls of building B9. The government will award the contract based on best value using a trade-off method of analysis, prioritizing superior non-price capabilities over the lowest price. Evaluation factors include technical approach, experience, and past performance from the last three years, all of which are collectively more important than the price quote. Submissions must be divided into a technical quote and a price quote, with the technical section limited to 15 pages. Compliance requirements include adherence to Davis-Bacon prevailing wage rates for heavy construction in Colorado and specific insurance minimums, including 500,000 dollars for general liability and 100,000 dollars for employer liability. Quotes are due by September 21, 2026, at 10:00am MTN.
Commercial and Institutional Building Construction

POSTED

about 7 hours ago

DEADLINE

in 3 days
View Details
NAICS: 541330
New
Federal
DOC Architect and Engineering IDIQ
Solicitation # AA-FEQ-WC-O-26-00495
The Department of Commerce is conducting market research through a Request for Information (RFI) under solicitation number AA-FEQ-WC-O-26-00495 to gather industry input for a potential Indefinite-Delivery Indefinite-Quantity (IDIQ) contract for Architect and Engineering services. This RFI, posted on June 2, 2026, with a submission deadline of June 16, 2026 at 2:00 p.m., is solely for information gathering and does not constitute a solicitation for proposals or a commitment to award a contract. Respondents must submit their responses exclusively via a designated Microsoft Form, and direct communication with the Government Point of Contact via email is prohibited. The NAICS code for this effort is 541330, and the contract will support the renovation of the historic Herbert C. Hoover Building in Washington, DC, requiring multi-discipline architectural and engineering services including planning, assessments, and design deliverables across multiple phases from concept through final sign-off. All work must adhere to GSA P100 standards, involve licensed professionals who sign and seal deliverables as required by law, and comply with federal, state, and local regulations concerning safety, hazardous materials, and environmental compliance. The government anticipates awarding firm fixed-price IDIQ contracts with a five-year period of performance, including a base year and four option years. Contractors must maintain all required professional licenses at their own expense, ensure personnel are qualified and trained, and comply with stringent security protocols including facility access screenings, information security awareness training, OPSEC requirements, and reporting of security violations. Deliverables must be submitted in specified electronic formats including MS Office, PDF, CAD, and BIM, and must meet exacting inspection criteria—being complete, coordinated, and free of critical or life-safety deficiencies. Offerors must provide their Unique Entity Identifier, self-certify their socioeconomic status, indicate applicable NAICS codes, and disclose any existing governmentwide contract vehicles they hold. The government reserves the right to contact respondents for clarification and will not reimburse costs incurred in responding to this RFI.
Engineering Services

POSTED

1 day ago

DEADLINE

in 28 days
View Details
NAICS: 513210
New
Federal
Cloud-Based GRC / Cyber Risk Compliance Automation Platform (FISMA High SaaS)
Solicitation # GG000000-26-00063
The Department of Commerce Shared Services Procurement Office, acting for the Office of Inspector General, is soliciting a commercial cloud-based Governance, Risk, and Compliance (GRC) automation platform. This acquisition is specifically for a Software-as-a-Service (SaaS) solution to automate FISMA documentation, AI-assisted control drafting, and continuous monitoring reporting for up to five information systems within a FISMA High categorization boundary. The objective is to utilize automation and AI to sustain the Risk Management Framework (RMF) lifecycle and audit support without increasing security staffing. The procurement will result in a Firm-Fixed-Price Purchase Order with a base period of 12 months from award, utilizing a Best Value Tradeoff source selection process. Key technical requirements include an active FedRAMP High authorization at the time of submission, as FedRAMP Moderate or Ready statuses are not acceptable. The solution must integrate with Microsoft 365, Azure Active Directory (Entra ID), and the Microsoft Graph API, and must provide a private B2B connectivity option such as Azure Private Link or ExpressRoute. All data transmissions must be encrypted using TLS 1.2 or higher and FIPS 140-2/140-3 validated modules. Offerors must provide a technical quotation and a price quotation by September 28, 2026, including itemized costs for software licensing and professional deployment services. Evaluation will be based on requirement understanding, solution identification, mandatory requirement compliance, and the provision of at least two federal customer references.
Software Publishers

POSTED

1 day ago

DEADLINE

in 10 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS