Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

FISMA Security Controls Auditor

Active

Federal

Response Deadline11/09/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The FISMA Security Controls Auditor subcontract, issued by the Department of Justice Jmd-Procurement Services Section, involves auditing information security controls for prime contractors on DOJ OIG projects. The scope of work includes performing vulnerability assessment scans, evaluating PII controls based on OMB Reporting Metrics, and delivering annual FISMA audit reports. A significant portion of the work requires processing FBI audit data on-site at FBI headquarters using classified networks and DOJ-issued equipment. Consequently, team members assigned to the FBI must possess Top Secret Facility Clearance and SCI clearance. Interested parties should note the response deadline of November 9, 2026.

General Info

DOJ subcontract for FISMA security audits requiring TS/SCI clearance by November 9, 2026.

Agency

Department Of Justice → Jmd-Procurement Services Section

NAICS

541512 - Computer Systems Design Services

Place of Performance

DC, 20350, USA

Set-Aside

NONE

Documents

This scope was carved out of DOJ-PSS-2710.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Financial and FISMA Audits

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 9

subcontract

Response DeadlineNov 9

Submission deadline

Response Deadline

11/09/2026, 10:00:00 PM UTCin 19 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Justice → Jmd-Procurement Services Section

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Justice → Jmd-Procurement Services Section

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Audits information security controls for prime contractors on Department of Justice (DOJ) OIG projects. Performs vulnerability assessment scans and evaluates PII controls based on OMB Reporting Metrics. Processes FBI audit data on-site at FBI headquarters using DOJ-issued laptops and classified networks. Requires Top Secret Facility Clearance and SCI clearance for FBI team members. Delivers annual FISMA audit reports and OMB Reporting Metrics.

Similar Contracts

Same NAICS industry code

MetroAccess Fare Collection and Management System

Solicitation # WMATA-0000010941

The Washington Metropolitan Area Transit Authority is seeking proposals for the MetroAccess Fare Collection and Management System under solicitation number WMATA-0000010941. This procurement falls under NAICS code 541512, focusing on computer systems design services to enhance the transit authority's ability to manage and collect fares for its MetroAccess services. The solicitation was posted on October 21, 2026, with a strict response deadline of October 27, 2026. Interested parties must submit their responses through the official WMATA supplier portal by the specified cutoff time to be considered for this project.

Washington Metropolitan Area Transit Authority

POSTED

about 3 hours ago

DEADLINE

ICT, Digital, and AI Infrastructure SupplyThis subcontract, titled ICT, Digital, and AI Infrastructure Supply, is managed by Kent County Council Procurement Services. The agreement focuses on the supply and implementation of digital health infrastructure and software specifically designed for financial lessors operating on NHS organization projects. The scope of work encompasses a broad range of technical requirements, including network infrastructure, telecommunications, connectivity solutions, enterprise and end-user hardware, and the delivery of Cloud and SaaS platforms along with active software licenses. The solicitation was posted on October 21, 2026, with a response deadline set for November 20, 2026. Classified under NAICS code 541512, the contract ensures the deployment of critical ICT infrastructure to support healthcare-related digital initiatives. Interested parties can find further details through the official tender service link provided by the agency.

Kent County Council (t/a Procurement Services)

POSTED

about 4 hours ago

DEADLINE

PeopleSoft HCM Application Management and Technical SupportThis subcontract focuses on the technical management, maintenance, and optimization of the PeopleSoft Human Capital Management system for prime contractors supporting the Texas Health and Human Services Commission. The scope of work includes managing web deployment and workflows, ensuring system interoperability, and maintaining strict security and data accuracy. Additionally, the provider is responsible for resolving major system outages and delivering System Incident Reports to ensure a secure and operational environment. The project requires full compliance with Data Use Agreement Version 8.5 and falls under NAICS code 541512. Interested parties must submit their responses by November 30, 2026, at 4:30 PM. This engagement is designed to maintain the stability and efficiency of the HCM system through dedicated technical support and rigorous operational oversight.

Health and Human Services Commission

POSTED

about 5 hours ago

DEADLINE

in about 1 month

Network Security Configuration ServicesThe Network Security Configuration Services subcontract involves performing technical hardening of printer fleets for prime contractors on managed print projects for the City of Dothan. The scope of work focuses on implementing device-hardening baselines, which include configuring TLS 1.2+, SNMPv3, and the encryption of stored data. Additionally, the provider is responsible for setting up secure erase and overwrite functions, establishing administrator role separation, and disabling all unused ports and protocols. To ensure system integrity, the contractor will utilize firmware validation tools to verify that only signed and validated firmware is used. The final deliverables for this engagement consist of a fully secured device fleet and a comprehensive documented hardening report. This opportunity is categorized under NAICS code 541512, with a response deadline of November 20, 2026.

POSTED

about 5 hours ago

DEADLINE

in about 1 month

Medical Device Cybersecurity and Software ManagementThis subcontract for Medical Device Cybersecurity and Software Management supports prime contractors on Department of Veterans Affairs VISN 23 projects. The scope of work focuses on maintaining integrated OR systems through the performance of software updates and firmware patching, specifically targeting StreamConnect Servers and OR1 NEO IP/AIR environments. A critical component of the contract involves ensuring security compliance by developing VA Form 6550 and MDS2 documentation. All deliverables must adhere to VA Handbook 6500.6 and the VA TIC Reference Architecture to ensure the cybersecurity integrity of the medical systems.

Network Contract Office 23 (36C263)

POSTED

about 7 hours ago

DEADLINE

EdTech Implementation and Data Integration ServicesThis subcontract for EdTech Implementation and Data Integration Services involves the technical configuration and deployment of a literacy screening platform for prime contractors working with the Pittsburgh Public School District. The scope of work includes setting up production environments with role-based access, managing rostering, and establishing automated data delivery systems through API or SFTP. Additionally, the provider is responsible for developing comprehensive technical integration documentation and data dictionaries to ensure a production-ready environment with validated data flows. The project is categorized under NAICS code 541512 and requires all personnel to obtain necessary Pennsylvania state clearances. Interested parties must submit their responses by November 23, 2026, to support the district's technical infrastructure and data integration goals.

Pittsburgh Public School District

POSTED

about 7 hours ago

DEADLINE

in about 1 month

Cybersecurity & Information Assurance AssessmentThis subcontract opportunity, titled Cybersecurity and Information Assurance Assessment, involves providing independent validation of security and privacy controls for prime contractors supporting Department of Homeland Security Customs and Border Protection projects. The selected provider will act as an independent third party to review Security Authorization packages and validate controls against NIST SP 800-53 standards, specifically focusing on NII-Common Viewer Systems and Integration Platforms. The primary deliverables for this engagement include a validated Security Authorization package and a comprehensive Independent Assessment Report. Managed by the Information Technology Contracting Division, the work is designated under NAICS code 541512 and will be performed in Ashburn, Virginia. Interested parties must submit their responses by October 28, 2026.

Information Technology Contracting Division

POSTED

about 7 hours ago

DEADLINE

Network Integration & Managed Services ProviderThe Network Integration and Managed Services Provider subcontract supports prime contractors on 0410 Aq Hq Contract projects for the Department of Defense. The scope of work involves performing logical configuration, network engineering, and proactive monitoring to deliver a fully integrated network environment. Key technical requirements include configuring high-density environments capable of supporting 200 concurrent users and implementing seamless failover capabilities through the use of managed routers and firewalls. All deliverables must adhere to NIST SP 800-171 security standards and include comprehensive documentation of the failover processes. The place of performance for these services is located in Bogota. Interested parties should note the response deadline of October 30, 2026, for this opportunity categorized under NAICS code 541512.

0410 Aq Hq Contract

POSTED

about 7 hours ago

DEADLINE

Information Assurance & RMF Compliance SupportThe Information Assurance and RMF Compliance Support subcontract focuses on providing technical documentation and oversight for cybersecurity certification and accreditation for prime contractors working on Defense Commissary Agency projects. The selected provider will manage Certification and Accreditation activities and develop necessary documentation to align with the Department of Defense Information Assurance Risk Management Framework process. This effort requires deep expertise in DoD RMF and IA standards to deliver updated compliance documentation and strategic recommendations. This opportunity is designated as an 8(a) set-aside under NAICS code 541512 and is managed by the Department of Defense through the W6QK Acc-Apg Director. The place of performance is located at Fort Lee. Interested parties must respond by October 30, 2026.

W6QK Acc-Apg Director

POSTED

about 7 hours ago

DEADLINE

SAP VC Systems Configuration and AVC Integration SupportThe SAP VC Systems Configuration and AVC Integration Support subcontract involves providing specialized technical configuration for the SAP landscape of prime contractors supporting Federal Prison Industries under the Department of Justice. The scope of work focuses on configuring QAS ALE transport systems to facilitate VC testing before production, evaluating Advanced Variant Configuration capabilities, and identifying suitable replacements for the ECL Viewer. Additionally, the contractor is responsible for reviewing FPI-built eComm sites specifically for VC products. Key deliverables include a fully configured QAS ALE system and a comprehensive technical recommendation report. Due to the nature of the agency, all personnel must be US citizens and successfully pass an NCIC background check. This opportunity is categorized under NAICS code 541512 and is associated with a response deadline of October 28, 2026.

Inc Federal Prison Industries

POSTED

about 7 hours ago

DEADLINE

ESS Cybersecurity and Supply-Chain Risk ManagementThe ESS Cybersecurity and Supply-Chain Risk Management subcontract focuses on providing cybersecurity auditing and risk management services for prime contractors supporting Health and Human Services ESS projects. The scope of work involves implementing FedRAMP requirements, conducting supply-chain risk management assessments, and securing the ESS network through the application of NIST frameworks and FedRAMP compliant cloud environments. The successful provider will be responsible for delivering comprehensive cybersecurity compliance reports and detailed risk mitigation plans. This opportunity is categorized under NAICS code 541512 and will be performed in Rockville, Maryland. Qualified candidates must possess specialized expertise in NIST frameworks and hold FedRAMP certification. The response deadline for this requirement is November 19, 2026.

Health And Human Service

POSTED

about 7 hours ago

DEADLINE

BD Pyxis IV Prep Integration and Technical Support ServicesThe BD Pyxis IV Prep Integration and Technical Support Services subcontract involves providing specialized installation and software integration for pharmacy projects at the VA Loma Linda Healthcare System. The primary scope of work focuses on integrating gravimetric scales into the BD Pyxis IV Prep workflow to ensure accurate weight measurement transmission and the functionality of automated alerts. The contractor is responsible for delivering a fully verified scale-to-software system while maintaining electronic audit trails and compounding records. In addition to the initial setup, the contract requires ongoing technical support and troubleshooting to maintain system integrity. This project is managed under the Department of Veterans Affairs, specifically through Network Contract Office 22, and is categorized under NAICS code 541512. Performance of these services will take place in Loma Linda, California.

262-NETWORK Contract Office 22 (36C262)

POSTED

about 7 hours ago

DEADLINE

More opportunities from Department Of Justice → Jmd-Procurement Services Section

Same awarding agency

Independent Financial Statement AuditorThis subcontract opportunity is for an Independent Financial Statement Auditor to support prime contractors on Department of Justice OIG projects. The selected provider will perform audits for the DOJ Consolidated group, Federal Prison Industries, Inc., and the Assets Forefigure and Seized Asset Deposit Funds. The primary objective is to deliver independent audit opinions and consolidated group audit reports while ensuring strict adherence to Government Auditing Standards and the CFO Act of 1990. Managed by the JMD Procurement Services Section, the contract requires the performing organization to maintain organizational independence and a Top Secret Facility Clearance. The solicitation was posted on October 9, 2026, with a response deadline of November 9, 2026. The work falls under NAICS code 541211 and is centered in the 20350 zip code area.

Offices of Certified Public Accountants

POSTED

DEADLINE

Financial and FISMA Audits

Solicitation # DOJ-PSS-2710

The Department of Justice Office of the Inspector General is seeking information through Sources Sought Notice DOJ-PSS-2710 for professional services to conduct annual financial and FISMA audits. The financial scope includes independent audits of the DOJ Consolidated group and standalone reporting for Federal Prison Industries, Inc. and the Assets Forefigure Fund and Seized Asset Deposit Fund, in accordance with the CFO Act of 1990 and other federal mandates. The FISMA scope requires auditing information security controls and practices, including vulnerability assessment scans and PII control evaluations, with specific reporting metrics due annually by the end of July. Eligible firms must be independent per Government Auditing Standards and maintain a current active Top Secret Facility Clearance. Strict security protocols are mandated, including the use of DOJ-issued laptops for FISMA work and on-site processing of FBI audit data at FBI headquarters on classified networks. Personnel requirements vary by role, ranging from Tier 3 to Tier 5 background investigations, with at least one FBI audit team member requiring SCI clearance. All contractor employees must be U.S. citizens, nationals, or lawful permanent residents. Interested vendors must submit a capability statement and vendor summary to Allison Polizzi by November 9, 2026, adhering to specific formatting guidelines including Avenir Next LT Pro 11-point font and a three-page limit per audit type.

Offices of Certified Public Accountants

POSTED

DEADLINE

Vehicle Recompete: FEDERAL FORFEITURE CLAIMS ADMINISTRATION — INDEFINITE DELIVERY / INDEFINITE QUANTITY 15JPSS22R00000039The Federal Forfeiture Claims Administration is an Indefinite Delivery Indefinite Quantity vehicle managed by the Department of Justice under the Offices, Boards and Divisions. This contract, identified by vehicle number 15JPSS22R00000039, has an ordering period that extends through January 31, 2028. It is currently classified as a full recompete with a pre-forecast posted date of July 31, 2026, and falls under NAICS code 541199. There are currently 16 active task orders with a total combined value of 2,935,071.47 distributed among six awardees. Kroll Settlement Administration LLC holds the largest share of the work with over 1.4 million dollars across seven orders, followed by RCB Fund Services LLC and Rust Consulting, Inc. Key projects under this vehicle include claims administration support for the Airbit Club, Hashflare, and We Build The Wall cases.

All Other Legal Services

POSTED

DEADLINE

Vehicle Recompete: AUTOMATED LITIGATION SUPPORT (ALS) — INDEFINITE DELIVERY / INDEFINITE QUANTITY 15JPSS20R00000005The Automated Litigation Support (ALS) contract is an Indefinite Delivery/Indefinite Quantity vehicle managed by the Department of Justice's Offices, Boards and Divisions. With an ordering period extending through May 31, 2027, the contract currently supports 68 active task orders with a total combined value of 366,291,565 dollars. The vehicle was established under solicitation 15JPSS20R00000005 and is classified as a full recompete. Two companies currently hold awards under this vehicle, with PAE Labat-Anderson LLC serving as the primary provider. PAE Labat-Anderson LLC manages 58 orders totaling over 364 million dollars, including several high-value Mega5 Automated Litigation Support Services tasks. Ernst & Young LLP holds the remaining 10 orders, valued at approximately 1.7 million dollars.

All Other Legal Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS