Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

FISMA Information Security Evaluation

Active

Federal

Response Deadline07/31/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → Attn: Ms S84 - OcsView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

72660, VA, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 16

subcontract

Response DeadlineJul 31

Submission deadline

Response Deadline

07/31/2026, 09:00:00 PM UTCin 2 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Attn: Ms S84 - Ocs

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → Attn: Ms S84 - Ocs

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Annual independent evaluation of NGA’s information security program under FISMA 2014, including risk assessment, control testing, policy review, and reporting in alignment with NIST, OMB, and DHS guidance.

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance and CUI SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 Revision 2 controls to safeguard Controlled Unclassified Information within the contractor’s systems and environments. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI in alignment with federal cybersecurity standards. The contractor must also comply with incident reporting requirements mandated by DFARS 252.204-7012, ensuring timely notification and remediation of any cybersecurity events affecting CUI. All activities must be performed under a Total Small Business Set-Aside, reserved exclusively for small businesses as defined by the SBA, and the work is classified under NAICS code 541512 for Computer Systems Design Services. The contract is structured as a subcontract and is associated with the Department of Defense’s Land Supply Chain organization. Responses must be submitted by the deadline of August 28, 2026, with the expectation that performance will occur within the defense supply chain environment.

LAND SUPPLY CHAIN

POSTED

about 1 hour ago

DEADLINE

Cybersecurity Compliance & CMMC Level 2 ImplementationThe contract requires the implementation and ongoing maintenance of CMMC Level 2 compliance across all IT systems involved in manufacturing, documentation, and shipment processes, ensuring alignment with NIST SP 800-171 security controls. This includes establishing, documenting, and enforcing policies and procedures to protect controlled unclassified information, conducting regular assessments to validate control effectiveness, and maintaining readiness for third-party CMMC audits. The scope also mandates immediate cyber incident reporting in accordance with federal requirements, with defined workflows for detection, response, containment, and reporting to appropriate authorities. The contract is structured as a subcontract under the Department of Defense’s ASC Commodities Division and is linked to NAICS code 541512, indicating a focus on computer systems design services. It was posted on July 29, 2026, with a response deadline of August 11, 2026, and the place of performance is unspecified but tied to operational systems supporting manufacturing and logistics functions. Compliance is not a one-time effort but requires continuous monitoring, documentation updates, personnel training, and adaptation to evolving threats or regulatory changes to sustain CMMC Level 2 certification throughout the contract lifecycle.

ASC COMMODITIES DIVISION

POSTED

about 1 hour ago

DEADLINE

Cybersecurity and Controlled Unclassified Information (CUI) SafeguardingThe contract requires the implementation of NIST SP 800-171 safeguards to protect Covered Defense Information, encompassing the development of a comprehensive System Security Plan, enforcement of strict access controls, and establishment of protocols for timely incident reporting. All security requirements must be fully aligned with federal standards for safeguarding Controlled Unclassified Information, ensuring that systems and processes are configured to mitigate risks associated with unauthorized access, disclosure, or compromise. The scope includes not only the primary contractor’s environment but also mandates the flow-down of these cybersecurity obligations to all subcontractors, requiring consistent compliance across the entire supply chain. This subcontract, issued by the Department of Defense’s ASC Commodities Division under NAICS code 541512, is focused on cybersecurity services for defense-related information systems. The response deadline is August 12, 2026, with the solicitation posted on July 29, 2026, indicating a compressed timeline for qualification and proposal submission. Performance is expected to support DoD missions where the protection of sensitive data is critical, and all parties must demonstrate proven capability in implementing and maintaining NIST 800-171 controls without exception. Failure to meet these requirements may result in noncompliance penalties or termination of contractual obligations.

ASC COMMODITIES DIVISION

POSTED

about 1 hour ago

DEADLINE

Cybersecurity Compliance & NIST SP 800-171 Assessment SupportThe contract seeks to secure advisory and implementation support to achieve NIST SP 800-171 compliance for a Department of Defense entity, specifically the ASC Commodities Division. The scope includes developing a System Security Plan, managing the Plan of Action and Milestones, and preparing the organization for a CMMC Level 2 third-party assessment. The work requires deep expertise in cybersecurity frameworks and hands-on experience guiding contractors through the entire compliance lifecycle from documentation to readiness evaluation. All tasks must be performed under the strict guidelines of NIST standards and aligned with the requirements of the Cybersecurity Maturity Model Certification program. This is a total small business set-aside under the SBA program with a NAICS code of 541512, indicating it is scoped for information technology consulting services. The solicitation was posted on July 29, 2026, with a response deadline of August 11, 2026, and is structured as a subcontract. Performance location details are unspecified, but the work is tied to the defense supply chain operations managed by the ASC Commodities Division. The contract is managed through the DLA DIBBS platform and targets qualified small businesses capable of delivering rapid, effective cybersecurity compliance support under tight timelines and stringent DoD requirements.

ASC COMMODITIES DIVISION

POSTED

about 1 hour ago

DEADLINE

Virtualization Consulting IDIQThe Port of Seattle is seeking a qualified technical services partner to conduct a comprehensive evaluation of its virtualization platform, focusing on performance, security, architecture integrity, and operational reliability. The consultation will analyze the current environment to identify risks, inefficiencies, and opportunities for optimization, delivering a prioritized roadmap that aligns with the organization’s business goals, compliance requirements, security standards, and resiliency needs. The engagement is designed to ensure the platform supports current operations while enabling future scalability and robustness. This procurement is issued under the Virtualization Consulting IDIQ framework, classified under NAICS code 541512 for computer systems design services. The contract is forecasted for release with primary point of contact Carol Hassard and project manager Jim Dawson, both reachable through the Port of Seattle’s ICT Enterprise Infrastructure Services division. The work will be performed remotely or on-site as required, with the exact location not specified, and interested vendors are directed to the official solicitation portal for further details and potential future opportunities under this IDIQ.

ICT Enterprise Infrastructure Services

POSTED

about 12 hours ago

DEADLINE

Azure Consulting IDIQThe Port of Seattle is pursuing a cloud services partnership to advance its use of Microsoft Azure and hybrid cloud environments through an indefinite-delivery, indefinite-quantity (IDIQ) arrangement. The primary objective is to validate and enhance the existing Azure infrastructure, ensuring it meets current operational demands while supporting future growth and innovation. This engagement will involve guiding the design and deployment of new services, strengthening security controls, improving system resiliency, and aligning all cloud solutions with organizational standards and best practices. The contractor will serve as a strategic advisor throughout the modernization journey, helping to optimize cloud architecture for performance, cost-efficiency, and scalability. Work will be performed remotely or on-site at the Port of Seattle’s location, with primary coordination handled by Carol Hassard and Project Manager Jim Dawson. The procurement is classified under NAICS code 541512 for computer systems design services, reflecting the focus on technical consultation and integration support rather than off-the-shelf software sales. While the solicitation number is not yet available, the forecast was posted in July 2026, indicating an upcoming competitive process for qualified vendors with proven expertise in Azure cloud transformation.

ICT Enterprise Infrastructure Services

POSTED

about 12 hours ago

DEADLINE

FIDS Software ReplacementThe Port of Seattle is forecasted to procure new software for the Flight Information Display System (FIDS) under the NAICS code 541512, targeting software development and related services. The contract aims to replace existing FIDS software to enhance the accuracy, reliability, and user experience of flight information displays throughout the airport facilities. While the solicitation number is not yet assigned and the posting date is listed as July 29, 2026, the opportunity is positioned as a forecasted procurement, indicating planning and preparation for a future competitive bid process. The place of performance and specific delivery locations are not yet defined, but the system will support operations at the Port of Seattle’s aviation facilities. Primary point of contact for this initiative is Farlis Lewis, who can be reached via email or phone, with Krista Sadler serving as the Project Manager for technical coordination and oversight. The contracting entity is ICT Enterprise Infrastructure Services, working under the Port of Seattle’s infrastructure and technology modernization objectives. There is no specified set-aside designation, suggesting the opportunity is open to all qualified vendors without gender, minority, or small business preferences. Stakeholders are encouraged to monitor the official portal listed in the document for formal solicitation release, which will include detailed requirements, submission guidelines, and evaluation criteria.

ICT Enterprise Infrastructure Services

POSTED

about 12 hours ago

DEADLINE

EMS Billing Software & ePCR System Integration Support

POSTED

about 21 hours ago

DEADLINE

in about 1 month

Technology Integration & Interoperability SupportThe contract titled Technology Integration & Interoperability Support requires the successful bidder to ensure seamless integration of cloud systems with Utah’s existing state IT infrastructure through standardized APIs, robust identity management protocols, and secure data exchange mechanisms. The focus is on maintaining compatibility and functionality across current and future systems, enabling sustained upgrades and enhancements without disrupting core operations or requiring scope expansion beyond the original objectives. All work must align with Utah’s architectural standards and support long-term scalability within the specified technical boundaries. This subcontract is open for response until August 11, 2026, and is classified under NAICS code 541512 for computer systems design services. It is issued by the Utah state agency, with no specific place of performance or point of contact listed, indicating the work may be performed remotely or across state IT facilities. The solicitation is posted on BonfireHub and is intended for subcontractors seeking to support Utah’s broader technology modernization goals by delivering interoperable, secure, and future-ready cloud solutions that adhere strictly to existing state IT frameworks.

POSTED

about 22 hours ago

DEADLINE

Continuous Monitoring System IntegrationThe contract requires seamless integration with DTS Continuous Monitoring systems within two weeks of award, focusing on the configuration of dashboards, APIs, and reporting tools to enable real-time security monitoring. This effort is critical for maintaining ongoing operational visibility and threat detection capabilities, and success hinges on timely and accurate deployment of the required technical components. The work is classified as a subcontract under NAICS code 541512, indicating it falls under custom computer programming services, and the solicitation remains open until August 25, 2026, with no set-aside provisions specified. The contracting entity is the state of Utah, and performance location details are not provided, though all work must align with the DTS system requirements as defined by the agency.

POSTED

about 22 hours ago

DEADLINE

Cloud Infrastructure Migration & Integration ServicesThe contract seeks a vendor to design and execute the migration of state systems and data into cloud environments managed by Utah’s Division of Technology Services, specifically targeting AWS, Google Cloud Platform, and Microsoft Azure. The scope includes comprehensive integration with identity management solutions and strict adherence to Utah DTS 5000-0002 security policy to ensure compliance with state-mandated standards. The work involves end-to-end planning, data transfer, system validation, and operational handoff to maintain continuity and security throughout the transition. This subcontract opportunity is open to qualified providers with demonstrated expertise in multi-cloud migrations and public sector compliance. The solicitation was posted on July 28, 2026, with proposals due by August 13, 2026, and is classified under NAICS code 541512 for computer systems design services. While the physical place of performance is not specified, the work is directly tied to Utah state systems and must align fully with the agency’s security and operational frameworks. All submissions must address the technical requirements for secure cloud integration and be prepared to demonstrate prior experience with similar statewide migrations.

POSTED

about 24 hours ago

DEADLINE

Cybersecurity Compliance and Data Safeguarding for Government SubmissionsThe contract requires the implementation and maintenance of NIST SP 800-171 security controls to protect covered defense information handled under government submissions, ensuring compliance with the Defense Federal Acquisition Regulation Supplement clauses DFARS 252.204-7012 and 252.240-7997. This includes establishing a robust cybersecurity framework to safeguard sensitive data, executing timely cyber incident reporting procedures, and maintaining ongoing adherence to federal cybersecurity standards throughout the contract period. The work is to be performed at the designated location in Dothan, Alabama, with all security and reporting obligations binding on the contractor as a subcontractor under the Defense Logistics Agency. The solicitation, issued under NAICS code 541512 for other computer-related services, is open for responses until August 10, 2026, with all submissions required to demonstrate capability to meet stringent defense information protection requirements. The contractor must possess the technical and procedural infrastructure to support continuous compliance, including documentation, audits, and incident response workflows aligned with federal mandates. Participation is limited to entities capable of operating within the Department of Defense’s cybersecurity ecosystem and ensuring end-to-end protection of controlled unclassified information as defined by applicable regulations.

Defense Logistics Agency

POSTED

DEADLINE

More opportunities from Department Of Defense → Attn: Ms S84 - Ocs

Same awarding agency

Handshake Software RequirementThe Handshake Software Requirement solicitation, identified by number NSAMG126195AS27, is a combined contract opportunity posted on July 29, 2026, with a response deadline of August 5, 2026, at 8:00 PM Eastern Time. The requirement falls under NAICS code 513210 and is managed by the Department of Defense through the Office of Attn: Ms S84 - Ocs, located in Springfield, Virginia, with a zip code of 22150-7500. Performance of the work is expected to occur in Springfield, Virginia. Interested parties must complete Appendix One with all highlighted columns filled out and submit it along with their official quote by the stated deadline. Point of contact for inquiries includes Baylee Skelton as the primary contact and Douglas Verseman as the secondary contact, both reachable via their official Department of Defense email addresses. The full solicitation and related documents are available through the SAM.gov portal linked in the contract data.

Software Publishers

POSTED

about 6 hours ago

DEADLINE

Audit Reporting & Documentation Management

All Other Professional, Scientific, and Technical Services

POSTED

DEADLINE

Cybersecurity & Personnel Vetting Support

Human Resources Consulting Services

POSTED

DEADLINE

Audit Quality Control & Independence Oversight

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Financial Statement Audit (FSA) Services

Offices of Certified Public Accountants

POSTED

DEADLINE

Request for Information - Financial Statement Audit (FSA) and Federal Information Security Modernization Act (FISMA) EvaluationThe National Geospatial-Intelligence Agency (NGA) is seeking information from industry on the ability to perform annual independent Financial Statement Audits (FSA) and Federal Information Security Modernization Act (FISMA) evaluations. This Request for Information (RFI) is strictly for planning purposes and does not constitute a solicitation or commitment to award a contract. The anticipated period of performance, if a future acquisition proceeds, would run from January 1, 2028, through December 31, 2032, with services to be performed at NGA facilities in Springfield, St. Louis, Arnold, and other approved locations. Respondents must hold or be able to obtain Top Secret facility clearance, and personnel must possess Top Secret/SCI clearance with a Counterintelligence Polygraph. All submissions must be unclassified and marked accordingly, and no classified or proprietary information should be included. Responses must include detailed administrative information such as business type under NAICS code 541211, DUNS and CAGE codes, DCAA certification status, and GSA or GWAC contract eligibility. Respondents must indicate whether they qualify as a small business and specify any small business designations, including small disadvantaged, woman-owned, HUBZone, or 8(a) status. Companies must also confirm awareness of FAR Clause 52.219-14, clarify whether they intend to act as prime or subcontractor, and indicate whether teaming arrangements among small businesses could support the requirement. Experience must be demonstrated through recent performance on similar federal audits or evaluations, including contract details, FTEs, personnel qualifications, and security protocols. Capability submissions must address current expertise in FSA, FISMA, or both, as well as security infrastructure and personnel availability throughout the contract term. Respondents are encouraged to provide feedback on the Draft Statement of Work, propose alternative NAICS codes, and confirm their intent to respond to any future solicitation. All responses must be submitted via email by 5:00 PM ET on July 31, 2026, limited to ten pages using Times New Roman 12-point font, and will become government property with no reimbursement for submission costs.

Offices of Certified Public Accountants

POSTED

DEADLINE

RFI for Future GEOINT Analytic TechnologiesThe National Geospatial-Intelligence Agency (NGA) has issued a Request for Information titled RFI for Future GEOINT Analytic Technologies with solicitation number HM047626RFI-FutureGEOINTAnalyticTech, posted on July 15, 2026, to gather input on advanced technologies for future geospatial intelligence analysis. This sources-sought notice is accessible only through the classified Intelligence Community Acquisition Research Center (ARC) website and requires participants to hold a Top Secret/Sensitive Compartmented Information (TS/SCI) clearance and possess a valid classified ARC account. Access to the portal is restricted to secure TS-level networks such as NMIS, NSAnet, CWE, AWAN, CWAN, or JWICS, with alternative arrangements available for cleared individuals without network access through a scheduled visit to the reading room. Responses are due by August 10, 2026, at 7:00 p.m., and all submissions must be made through the secure ARC platform. The opportunity is managed by the Department of Defense under the office of Attn: Ms S84 - Ocs located in Springfield, Virginia, with Sarah Lugo serving as the primary point of contact reachable at sarah.r.lugo@nga.mil.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Request for Information for NGA's AltaThe National Geospatial-Intelligence Agency is seeking information from contractors capable of supporting the Alta requirement under the Advanced GEOINT Services Program Office through a classified Request for Information. The RFI and accompanying draft Performance Work Statement are available only on the classified Intelligence Community-Acquisition Research Center portal, and all inquiries must be submitted through this secure channel by 12:00 ET on 21 July 2026. White paper responses are due no later than 12:00 ET on 11 August 2026. Contractors must register for access to the IC-ARC system by contacting the ACE Help Desk via email or phone, using either classified or unclassified channels. This solicitation carries no set-aside designation and is open to all qualified vendors. The primary point of contact is Joseph Cloft, with secondary support from Phong Van Chau, both reachable through NGA email addresses. The contracting office is located in Springfield, Virginia, and the work is expected to be performed at the same location.

National Security

POSTED

DEADLINE

FG3D Subject Matter ExpertThe contract seeks a Subject Matter Expert to deliver specialized 3D geospatial modeling, visualization, and analysis capabilities in support of Foundation GEOINT operations, with a primary focus on developing advanced 3D data products. The work will involve applying cutting-edge techniques to transform complex geospatial data into actionable, three-dimensional representations that enhance situational awareness and decision-making for defense-related missions. Expertise in geospatial software, 3D terrain modeling, spatial analysis, and visualization tools is essential to meet the operational requirements of the project. This is a subcontract under the Department of Defense, classified under NAICS code 541370 for other scientific and technical consulting services, and the performance location is in Saint Louis. The opportunity was posted on June 22, 2026, and while no solicitation number or set aside details are provided, the emphasis is on securing highly qualified personnel to support critical GEOINT functions. The role requires deep technical proficiency and experience in delivering geospatial products under government operational constraints, with the expectation of close collaboration with defense stakeholders to ensure product relevance and mission alignment.

Surveying and Mapping (except Geophysical) Services

POSTED

about 1 month ago

DEADLINE

Cost EstimatorThe contract is for a Cost Estimator position under a subcontract related to the Department of Defense, focused on developing detailed cost estimates, life-cycle cost analyses, and budget forecasts for FG programs to support financial planning and cost modeling efforts. The work will involve creating accurate financial projections and analytical models that inform program management decisions, ensuring alignment with budgetary constraints and long-term fiscal goals. The position requires expertise in financial analysis, cost forecasting methodologies, and an understanding of defense program funding structures. Performance of this work is located in Saint Louis, Missouri, and the contract is classified under NAICS code 541690, which covers other scientific and technical consulting services. The solicitation was posted on June 22, 2026, with no specific set-aside designation indicated, and the contracting office is identified as Attn: Ms S84 - Ocs. The nature of the assignment suggests close collaboration with program managers and financial teams to deliver timely, reliable cost data critical to operational planning and resource allocation within defense programs.

Other Scientific and Technical Consulting Services

POSTED

about 1 month ago

DEADLINE

System Transition & Integration SpecialistThe contract seeks a System Transition & Integration Specialist to lead the technical transition between legacy and new systems, with a focus on integrating GEOINT platforms to ensure seamless interoperability. Key responsibilities include developing and executing integration plans, coordinating testing activities across teams, and managing the technical handoff to minimize disruption during system migration. The role requires deep expertise in geospatial intelligence systems, systems architecture, and cross-platform communication protocols to ensure data integrity and operational continuity throughout the transition. This subcontract is tied to the Department of Defense through the office of Ms S84 - Ocs and requires performance in Saint Louis. The NAICS code 541512 indicates the work falls under other computer-related services, specifically targeting systems integration and technical transition support. The contract opportunity was posted on June 22, 2026, and is available through the SAM.gov platform, though no solicitation number or set-aside details have been provided. The position demands a technical professional capable of navigating complex defense systems environments and delivering solutions that support mission-critical intelligence capabilities.

Computer Systems Design Services

POSTED

about 1 month ago

DEADLINE

Foundation GEOINT Subject Matter Expert #2The contract seeks a Foundation GEOINT Subject Matter Expert to deliver specialized technical support for integrating geospatial data into mission operations, focusing on forward-leaning GEOINT systems, data standards, and operational workflows. The expert will provide foundational knowledge and practical guidance to ensure seamless interoperability of geospatial intelligence within complex operational environments, leveraging current technologies and emerging best practices in geospatial data management. This role requires deep familiarity with the full lifecycle of geospatial data—from collection and processing to dissemination and operational utility—and the ability to align technical solutions with mission-critical requirements. The work is performed in Saint Louis under a subcontract arrangement classified under NAICS code 541690 for other scientific and technical consulting services. The opportunity is solicited by the Department of Defense through the office of Ms S84 - Ocs, indicating a direct link to defense-related intelligence and operational planning activities. While specific performance timelines or deliverables are not detailed, the position demands a high level of subject matter expertise and active engagement with multidisciplinary teams to enhance the efficacy and reliability of geospatial tools used in real-world missions. The posting date of June 2026 suggests this is a future opportunity targeted to support evolving geospatial intelligence capabilities across defense operations.

Other Scientific and Technical Consulting Services

POSTED

about 1 month ago

DEADLINE