Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

FISMA Compliance and IT Security Services

Open
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

NAICS

541512 - Computer Systems Design Services

Place of Performance

MD, USA

Set-Aside

NONE

Documents

This scope was carved out of 75N94027R00005.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

NIMHD Division of Intramural Research Population Health and Clinical Research — Small Business Sources Sought

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Health And Human Services → National Institutes Of Health Olao
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implements and maintains IT security controls for prime contractors on NIMHD research data systems. Performs security audits, system hardening, and monitoring using secure data hosting environments and encryption tools. Requires FISMA compliance and IT security certifications such as CISSP. Delivers FISMA compliance reports and a secure data environment.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
SLED
Cybersecurity Maturity Model Certification (CMMC) Program Services
Solicitation # 09112026
The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.
University of Arkansas Fayetteville (UAF)

POSTED

about 9 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
FY27_EOPSS_ITS87_Artificial Intelligence Engineer
Solicitation # BD-27-1044-EPS17-OTIS-135351
The Executive Office of Public Safety and Security (EOPSS) is seeking a Cloud AI Engineer to support the enhancement and management of a system-wide criminal justice data platform. This role is focused on accelerating AI adoption and implementing enterprise-scale solutions to integrate data from courts, police departments, and custodial institutions. The engineer will be responsible for architecting retrieval-augmented generation (RAG) solutions using vector databases and embedding models, integrating Model Context Protocol (MCP) servers, and managing AWS infrastructure using Terraform and CloudFormation. Key security requirements include implementing AWS IAM and Snowflake Role-Based Access Control (RBAC). The engagement is a full-time position of 37.5 hours per week, running through June 30, 2027, with a maximum all-inclusive hourly vendor bill rate of $125. Candidates must possess at least 10 years of experience in AWS cloud and data solutions. While the primary location is Milford, Massachusetts, there is a preference for candidates residing in Massachusetts or those able to travel to Milford, Boston, or Middleborough. Selected candidates must complete CORI and DCJIS fingerprinting requirements in Chelsea, Massachusetts. This procurement is eligible for the Small Business Purchasing Program, and vendors may submit a maximum of eight resumes via the COMMBUYS portal.
Executive Office of Public Safety & Security

POSTED

about 11 hours ago

DEADLINE

in 14 days
View Details
NAICS: 541512
New
SLED
2027-Cyber-01 Notice of Funding Opportunity for Rural Health Cybersecurity Grant Program
Solicitation # BD-27-1367-1367C-1367L-135350
The Massachusetts Technology Collaborative (MassTech) is issuing Notice of Funding Opportunity (NOFO) No. 2027-Cyber-01 to provide grants to eligible Rural Health Facilities (RHFs) in Massachusetts. Funded by the Centers for Medicare & Medicaid Services (CMS) under the Rural Health Transformation Program, this initiative aims to enhance cybersecurity through services provided by CyberTrust Massachusetts. The scope of work includes technical cybersecurity assessments against healthcare-specific frameworks and the implementation of ThreatLocker for application control. The total financial assistance award is $162,005,238.13, with a specific program track ceiling for Rural Health Cybersecurity of $9,725,625.00 for Years 1-3. Applicants must provide a brief organizational overview, a W-9, and a signed acceptance form, along with a scope of work from CyberTrust Massachusetts and a brief description of how the services will mature their cybersecurity program. Selected subrecipients are required to submit quarterly and annual reports to CMS and must comply with 2 CFR Part 200 Subpart F for audit purposes. The program emphasizes adherence to the HIPAA Security Rule and requires that all participants maintain a lack of debarment status from state and federal governments. MassTech and other state oversight agencies reserve the right to audit real-time financial tracking dashboards and verify that all expenditures are allowable, reasonable, and necessary.
Massachusetts Technology Collaborative

POSTED

about 11 hours ago

DEADLINE

in almost 9 years
View Details
NAICS: 541512
New
SLED
Cybersecurity Products and Services
Solicitation # COOP2026SOL-00010
The Department of Information Resources (DIR) is soliciting responses for solicitation COOP2026SOL-00010 to provide Cybersecurity Products and Services to DIR customers in Texas. The scope is divided into two primary categories: products, including endpoint, network, data, application, cloud, identity and access management, operational, AI, and governance security; and services, covering vulnerability management, incident response, data backup, and virtual system infrastructure design. The contract term is estimated at two years with options for a two-year renewal, a one-year renewal, and a possible twelve-month extension. Award decisions are based on a weighted evaluation system consisting of pricing at 55% and capabilities, offerings, and service overview at 45%. Evaluation also considers the CPA Vendor Performance Tracking System and PDAA accessibility scores. Respondents may be disqualified for missing ACRs, incomplete VADSIRs, or deficient PDAA self-assessments. All responses must be submitted via the BidStamp VIS portal by February 10, 2027. Successful respondents must comply with various state and federal regulations, including the Texas Prompt Payment Act, TX-RAMP for cloud computing, and the Buy America Act. Invoicing is handled directly between the respondent and the customer. Required documentation includes a signed Response Certification Form, a Capabilities and Service Overview with specific page limits, and a pricing sheet in Excel format. Additionally, any proposed subcontracting requires a State of Texas Subcontracting Plan detailing the percentage of work awarded to certified VethUBs.
Department of Information Resources

POSTED

about 11 hours ago

DEADLINE

in 3 months
View Details

More opportunities from Department Of Health And Human Services → National Institutes Of Health Olao

Same awarding agency

NAICS: 541715
New
Federal
NIMHD Division of Intramural Research Population Health and Clinical Research — Small Business Sources Sought
Solicitation # 75N94027R00005
The National Institute on Minority Health and Health Disparities (NIMHD) is conducting market research via a Small Business Sources Sought notice to identify qualified small businesses capable of providing research and development social and behavioral sciences services. The objective is to support the NIMHD Division of Intramural Research in conducting population health and clinical research aimed at understanding and reducing health disparities in the United States. The government anticipates awarding an Indefinite Delivery Indefinite Quantity (IDIQ) contract around September 2027. The scope of work involves designing and overseeing clinical and technical investigations using methods such as epidemiological studies, clinical trials, and qualitative research, while managing the recruitment of participants and the coordination of multiple research sites. The required services include comprehensive project management, regulatory compliance assurance, and the provision of qualified personnel, including medical, nursing, and neuropsychologic staff. Contractors must ensure adherence to Good Clinical Practices (GCP), Good Clinical Laboratory Practices (GCLP), and FISMA security standards, while managing FDA-compliant reporting for adverse experiences. This effort is categorized under NAICS code 541715, with a small business size standard of 1,000 employees or less. Interested small businesses must submit an electronic capability statement of 20 pages or less to the Contracting Officer and Contract Specialist by November 25, 2026, detailing their business status, UEI, and CAGE code.
Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

about 20 hours ago

DEADLINE

in 15 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS