This Solicitation opportunity from Department Of Defense was posted on August 6, 2025. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

FY25 PACAF Assessment and Authorization for Federal Information System Management Act (FISMA) and Cybersecurity Hardening

Closed

FA521525Q0028Federal

Submission Closed08/11/2025, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541519

New

SLED

Cybersecurity Audit & Compliance Services

Department of Highway Safety and Motor Vehicles

POSTED

DEADLINE

1Password Software License Provision

State Air Resources Board

POSTED

DEADLINE

Security Operations Centre (SOC) Establishment Advisory

POSTED

DEADLINE

24/7 Technical Support ServicesThis subcontract for 24/7 Technical Support Services involves providing Tier 1 and Tier 2 technical assistance for prime contractors working on Department of Youth Services platform projects. The scope of work includes continuous help desk operations focused on troubleshooting web portal functionality, platform access, reporting tools, and alert notifications through the use of remote support tools and ticketing systems. The selected provider is responsible for delivering detailed technical support logs and ensuring all personnel are vetted in accordance with the contractor's information security program. This opportunity falls under NAICS code 541519, with a response deadline set for November 18, 2026.

Dept Of Youth Services

POSTED

DEADLINE

Outbound API/HL7 Maintenance & Support

255-NETWORK Contract Office 15 (36C255)

POSTED

DEADLINE

Rapid Reaction Team (RRT) Operational Uplift (WP4)

Bureau Of Industry And Security

POSTED

DEADLINE

Red Teaming & Adversary Emulation Enhancements (WP3)

Bureau Of Industry And Security

POSTED

DEADLINE

7G21--BNE Hillrom Voalte Nurse Call Requirement (New Work)

Solicitation # 36C10B27Q0040

The Department of Veterans Affairs, through the Birmingham VA Health Care System, is conducting market research for a brand name or equal Hillrom Voalte nurse call system. The scope of work includes the provision of hardware and software, such as graphical and standard room stations and ADT facility software licenses, along with staging, installation, and the termination, testing, and labeling of cables. A critical requirement is the seamless integration of the system with 107 existing Hillrom beds without the use of third-party middleware. The project also requires the implementation of a visual dashboard for real-time patient and bed data and the provision of three-day customer host technical training. Performance will take place at the Birmingham VA Medical Center, with strict adherence to Section 508 accessibility standards and VA cybersecurity protocols, including compliance with OMB Memorandum M-19-26 and VA Directive 6513. The contractor must ensure all personnel sign the VA Information Security Rule of Behavior and undergo required background investigations. For SDVOSB or VOSB concerns, at least 50 percent of the cost of performance must be expended for eligible employees or concerns. This effort is currently in the Request for Information phase for planning purposes, and no funds have been authorized or appropriated at this time.

Technology Acquisition Center Nj (36C10B)

POSTED

DEADLINE

Cyber Security Engineering and Risk Management Framework Support

Solicitation # W91CRB-26-B-A006

Solicitation W91CRB-26-B-A006 is a Firm-Fixed-Price commercial services contract issued by the Army Contracting Command - Aberdeen Proving Ground. The requirement is for Cybersecurity Engineering and Department of Defense Risk Management Framework (RMF) Support Services at the Aberdeen Test Center in Maryland. The contractor will provide all necessary personnel, equipment, and non-personal services to perform RMF analysis, planning, execution, and maintenance to establish and maintain Authority to Operate (ATO) compliance. The total period of performance spans from November 23, 2026, to November 22, 2031, consisting of a one-year base period and four one-year option periods. This acquisition is set aside 100 percent for small businesses, with a specific evaluation preference for HUBZone small business concerns. Award will be made to the lowest-priced, responsive, and responsible bidder based on a pass/fail responsiveness evaluation. Key personnel requirements include a Senior IT Solutions Architect with CISSP certification and 10 years of RMF experience, while other certified professionals must hold CASP+ or equivalent with 5 years of experience. Security requirements are stringent, requiring a Secret Facility Security Clearance for the bidder and Secret clearances for personnel, with one surge position requiring a Top Secret clearance. Performance will be monitored via a Quality Assurance Surveillance Plan, and invoicing must be processed through the Wide Area Workflow application.

POSTED

DEADLINE

NATO Request for Information: NATO Integrated Cyber Defense Center (NICC) Urgent Requirement Project

Solicitation # RFI-42630696-NICC

The NATO Communications and Information Agency (NCIA) has issued Request for Information RFI-42630696-NICC to gather industry input for the technology pillar of the NATO Integrated Cyber Defense Centre (NICC). This RFI is for planning purposes only and is not a formal solicitation for bids. The project aims to enhance the protection of NATO and its Allies through the delivery of new Communications and Information Services capabilities and operational uplifts. The scope is divided into five Work Packages: the NICC Platform (WP1), Enhancements to Situational Awareness (WP2), Enhancements to Red Teaming (WP3), Rapid Reaction Teams (WP4), and the Cyber Operations Management and Engagement Tool (WP5). Interested parties are invited to provide feedback and recommendations on four of these packages (WP1, WP2, WP4, and WP5) to help NCIA refine its acquisition strategy and understand available marketplace capabilities. Technical requirements emphasize the need for systems that can operate across multiple classification levels (NU, NR, NS) and maintain operational independence in air-gapped or compromised environments. The capability must support scalable processing of large volumes of cybersecurity data and may include AI-assisted automation for anomaly recognition. While this RFI is informational, NCIA plans a future phased down-select acquisition approach involving a 10-page capability statement followed by a full proposal and a challenge-based event. All deliverables for the work packages are expected by Q3 2030. Responses must be submitted via email by 12:00 CET on November 9, 2026, and should not exceed 10 pages per work package. Additionally, a business workshop titled Uplifts for Cyber Capabilities will be held at NATO Edge in Izmir, Turkey, from November 17-19, though attendance is not required to respond to the RFI.

Bureau Of Industry And Security

POSTED

DEADLINE

Software-as-a-Service (SaaS) Subscriptions and Systems Integration (SI) Support Services for the Omnichannel Customer Communication System (OCCS)

Solicitation # SaaS_SI_OCCS

The Defense Commissary Agency (DeCA) is seeking information for a potential Firm-Fixed-Price contract to provide Software-as-a-Service (SaaS) subscriptions and Systems Integration (SI) professional services for its Omnichannel Customer Communication System (OCCS). The OCCS ecosystem is built upon four functional pillars utilizing Salesforce Service Cloud, Sprout Social for social media engagement, and Adobe Workfront and Adobe Experience Manager (AEM) Assets for campaign and digital asset management. The anticipated period of performance is a five-year term, consisting of a 12-month base period followed by four 12-month option periods. Key technical requirements include the migration of digital assets from a legacy Bynder DAM to AEM Assets, the configuration of Salesforce AI for automated triage and sentiment detection, and the provisioning of a multi-platform architecture within GovCloud. All solutions must meet strict cybersecurity standards, including FedRAMP Moderate (DoD IL4) or High (DoD IL5) accreditation, FIPS 140-2/3 encryption, and compliance with DoD Manual 8140.03. The contractor will be responsible for RMF Security Authorization Packages, eMASS control maintenance, and ATO renewals, while ensuring zero public model training using agency data. The government is currently assessing industry capabilities under NAICS 541915. Baseline licensing requirements include 40 Salesforce Service Cloud licenses, 25 Sprout Social licenses, 42 combined Adobe licenses, and an initial 6 TB of AEM Assets storage. Interested respondents must provide capability statements, including verification of authorized reseller status for the specified OEMs and identification of existing Government-Wide Acquisition Contracts or Federal Supply Schedules.

W6QK Acc-Apg Contr Ctr

POSTED

DEADLINE

NEXODOSE DOSE MONITOR

Solicitation # 36C25527Q0017

The Department of Veterans Affairs Network Contracting Office 15 is conducting market research through a Sources Sought announcement to identify qualified businesses capable of providing software maintenance, support, and interface services for the DoseMonitor/Nexodose radiation dose tracking platform. This requirement supports clinical safety and regulatory compliance for VA medical facilities across Kansas and Missouri, including sites in Topeka, Leavenworth, Kansas City, St. Louis, Columbia, and Poplar Bluff. The scope of work includes annual maintenance and support for the DoseMonitor/Nexodose application and outbound API/HL7 interfaces, as well as the one-time installation and ongoing support of bi-directional HL7 interfaces with the Oracle Health/Cerner electronic health record system in both production and test environments. The anticipated period of performance consists of a base year from February 1, 2027, to January 31, 2028, with one option year extending to January 31, 2029. Work will be performed primarily remotely, though on-site support may be required for installation and troubleshooting. Contractors must adhere to VA Handbook 6500, HIPAA privacy rules, and HL7 v2.x messaging standards. Interested firms must be registered in SAM.gov and provide a capability statement, product brochures, and an authorized service provider letter from the OEM. Responses should be submitted to Betty Flores at veronica.flores@va.gov by October 29, 2026.

255-NETWORK Contract Office 15 (36C255)

POSTED

about 21 hours ago

DEADLINE

in 9 days

AI Contract Overview

The Department of the Air Force is seeking to award a single firm-fixed-price contract under an 8(a) set-aside to support the PACAF Assessment and Authorization efforts related to FISMA compliance and cybersecurity hardening at JBPHH, Hawaii. The contract aims to provide specialized personnel to assist the HQ PACAF Cybersecurity Office with conducting security assessments, offering cybersecurity consultations, and supporting unit inspection preparations across the PACAF Area of Responsibility. The scope includes vulnerability management, physical security, emission security, cross-domain solutions, and network security consulting, with additional support for NAF/Wings to achieve cyber readiness through scheduled CRR-M assessments aligned with USCYBERCOM and DISA criteria. Travel within the PACAF region is required, and the services will be procured in accordance with FAR Parts 12 and 13. The government emphasizes that awards are contingent upon funding availability and necessary approvals, with the right to cancel the solicitation at any time. Interested parties are invited to submit questions by August 5, 2025, with responses due by August 11, 2025. The solicitation underscores that no reimbursement will be provided for proposal costs and encourages review of all attached documents prior to inquiry submissions.

General Info

Firm-fixed-price contract for cybersecurity assessments and support for PACAF, Hawaii, 8(a) certified businesses only.

Agency

Department Of Defense → FA5215 766 Ess Pkp

Contract Value

$637,315

NAICS

541519 - Other Computer Related Services

Place of Performance

Honolulu, HI, 96806, USA

Set-Aside

Awardee

NISGA'A CIOPS LLC

Award Issued Date

09/30/2025, 12:00:00 AM UTC

Documents

Clarifications to Draft Solicitation - FA521525Q0028

3 pages · q-and-a

High

FA521525Q0028 - FY25 PACAF FISMA and Cybersecurity Hardening

42 pages · rfq

High

FA521525Q0028 Instructions to Offerors

rfq

High

FA521525Q0028 Questions and Responses

7 pages · q-and-a

High

FA521525Q0028 Summary of Changes

2 pages · amendment

High

FA52525Q0028 Instructions to Offerors

7 pages · rfq

High

PACAF A&A FISMA and Cybersecurity Hardening Services Price Workbook

14 pages · specifications

High

PACAF FISMA A&A and Cybersecurity Hardening PWS

33 pages · sow

High

PACAF FISMA A&A and Cybersecurity Hardening PWS

33 pages · sow

High

AI Contract Breakdown

Uniform Contract Format

Contract not broken down yet

CLEATUS splits the solicitation into Uniform Contract Format (UCF) sections: scope, pricing, deliverables, and evaluation criteria.

Timeline

1 update

PhaseClosed

PostedAug 4

Solicitation

Notice updatedAug 6

The notice description changed.

Response DeadlineAug 11

Deadline has passed

Submission Closed

08/11/2025, 06:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → FA5215 766 Ess Pkp

Contacts2 people available

OfficeJBPHH, HI, 96860-4928, USA

Organization / AgencyDepartment Of Defense → FA5215 766 Ess Pkp

Office AddressJBPHH, HI, 96860-4928, USA

Contacts

SSgt Jessica Kinser

contact@example.gov

Amanda Kimbel

contact@example.gov

Full Description

The 766 Enterprise Sourcing Squadron (ESS) located at JBPHH, Hawaii has a requirement that calls for personnel in support of the PACAF Assessment and Authorization (A&A) for Federal Information System Management Act (FISMA) and Cybersecurity Hardening. The contractors will work for the HQ PACAF Cybersecurity Office and conduct security assessments, and provide security consultations to military and DOD civilian personnel within PACAF AOR. The contractors, at the Government's request, shall augment as unit inspection preparation team providing required expertise in Vulnerability Management, Physical Security, Emission Security (EMSEC), Cross Domain Solutions (CDS), and network security consulting. The contractors will also support NAF/Wings to be - cyber ready via scheduled CRR-M. CRR-M assessments will utilize USCYBERCOM and DISA criteria as it relates to CORA and the most recent effort involving CCORI. Travel in the PACAF AOR is also required. The 766 intends to award one firm-fixed-price contract and will set aside the acquisition to be awarded competitively to an 8(a) company. The services will be purchased in accordance with FAR Part 12 and FAR Part 13. The Government will evaluate quotes based on factors listed in the solicitation. Notice to Interested Parties: No award will be made under this solicitation until funds become available. Additionally, this effort is subject to appropriate approvals and authorizations prior to contract award. The Government reserves the right to cancel this procurement, either before or after the closing date, and has no obligation to reimburse an offeror for any costs. Questions are due NLT 5 August 2025 at 0800 HST to SSgt Jessica Kinser at jessica.kinser.1@us.af.mil and Ms. Amanda Kimbel at amanda.kimbel@us.af.mil. Please review all attached documents before submitting any questions; clarifications from the DRAFT solicitation are provided. This solicitation was administratively updated on 6 August 2025. The proposal due date has not changed. A Summary of Changes, Submitted Questions and Answers, updated Instructions to Offerors, and updated PWS have now all been provided.