Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, December 9 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

GIS Cybersecurity Compliance and Penetration Testing

Open

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for the Department of Veterans Affairs, managed by the Technology Acquisition Center Nj, focuses on GIS Cybersecurity Compliance and Penetration Testing. The selected provider will perform security audits, penetration testing, and cybersecurity framework validation for GIS environments supporting prime contractors. Key technical requirements include testing IT systems and controls to ensure tunnel endpoints are routable according to VA TIC Reference Architecture and VA Directive/Handbook 6513. The contractor is responsible for providing evidence for ISO and NIST CSF standards and delivering comprehensive cybersecurity audit reports and compliance certification documentation. This effort falls under NAICS code 541519 and is designed to ensure the security and regulatory compliance of critical infrastructure within the VA's technological ecosystem.

General Info

GIS cybersecurity compliance and penetration testing for Department of Veterans Affairs IT systems.

Agency

Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

NAICS

541519 - Other Computer Related Services

Place of Performance

NJ

Set-Aside

NONE

Documents

This scope was carved out of 36C10B26Q0402.

The full solicitation package (5 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

DA01--Market Research Request Geographic Information System Support

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedJul 10

subcontract

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security audits, penetration testing, and cybersecurity framework validation for the GIS environment for prime contractors on Department of Veterans Affairs (VA) projects. Conducts tests of IT systems and controls, ensures tunnel endpoints are routable per VA TIC Reference Architecture and VA Directive/Handbook 6513, and provides evidence for ISO and NIST CSF. Delivers cybersecurity audit reports and compliance certification documentation.

Similar Contracts

Same NAICS industry code

Hardware Maintenance and Support ServicesThis subcontract for Hardware Maintenance and Support Services involves providing ongoing technical support and routine maintenance for Microsoft Surface devices and tablets. The work supports prime contractors operating on projects for the City of Philadelphia Office of Innovation and Technology. Responsibilities include utilizing specific Microsoft Surface maintenance tools to perform troubleshooting and maintenance in accordance with Office Automation Form requirements. The service provider is required to deliver all maintained hardware along with detailed support service logs. This project is based in Philadelphia and falls under NAICS code 541519. Interested parties should note the response deadline of November 18, 2026.

Office of Innovation & Technology (oit)

POSTED

about 6 hours ago

DEADLINE

Hardware Installation and Configuration ServicesThis subcontract for Hardware Installation and Configuration Services supports prime contractors on projects for the City of Philadelphia Office of Innovation and Technology. The scope of work involves the installation, configuration, and physical deployment of Microsoft Surface devices and tablets. All hardware must be configured for city use according to Office Automation Form requirements using specific configuration software and deployment tools to ensure devices are fully operational upon delivery to end-users. The project is based in Philadelphia and falls under NAICS code 541519. Interested parties should note the response deadline of November 18, 2026, for this opportunity posted by the Office of Innovation and Technology.

Office of Innovation & Technology (oit)

POSTED

about 6 hours ago

DEADLINE

Cybersecurity Consulting for Utility InfrastructureThis subcontract for Cybersecurity Consulting for Utility Infrastructure supports the City of Daytona Beach Utilities Department by providing specialized guidance, evaluation, and implementation services for prime contractors. The scope of work focuses on performing critical assessments and vulnerability evaluations for IT and OT infrastructure across water, wastewater, and reclaimed water systems. Key deliverables include comprehensive cybersecurity assessments, detailed implementation plans, and formal compliance reports. To ensure high standards of security and accessibility, the contract requires adherence to WCAG 2.0 AA compliance and mandates that personnel hold industry-recognized certifications such as CISSP or CISM. Interested parties must submit their responses by December 17, 2026, under NAICS code 541519.

Utilities Department

POSTED

about 12 hours ago

DEADLINE

in about 1 month

Software Technical Support and MaintenanceThis subcontract for Software Technical Support and Maintenance involves providing ongoing technical assistance, system patching, and software upgrades for prime contractors supporting Department of the Air Force and Air Combat Command projects at Moody Air Force Base. The scope of work focuses on managing system updates and remote support through the use of patch management tools, all governed by a formal Service Level Agreement to ensure documented uptime and strict patch compliance. The opportunity is categorized under NAICS code 541519 and is associated with the Department of Defense. Interested parties should note the response deadline of November 30, 2026, for this requirement based at zip code 31699.

FA4830 23 Cons Cc

POSTED

about 14 hours ago

DEADLINE

ALLTAX Documentation and Compliance Support

Ibc Acq Svcs Directorate (00004)

POSTED

about 14 hours ago

DEADLINE

Cybersecurity & ATO MaintenanceThis subcontract, titled Cybersecurity and ATO Maintenance, is issued by the Department of Veterans Affairs through the Technology Acquisition Center Nj. The primary objective is to provide continuous security monitoring for prime contractors working on VA software projects. Key responsibilities include managing security artifacts within SNOW Continuous Authorization and Monitoring, ensuring strict adherence to FIPS 140-3 and NIST SP 800-53 standards, and implementing PIV/CAC multi-factor authentication. The scope of work further requires the generation of Software Bill of Materials and the remediation of vulnerabilities in accordance with CISA directives. The contractor is responsible for delivering updated Authority to Operate packages and comprehensive security assessment reports. This opportunity falls under NAICS code 541519, with a response deadline set for November 30, 2026.

Technology Acquisition Center Nj (36C10B)

POSTED

about 14 hours ago

DEADLINE

Cybersecurity Maintenance and RMF Compliance Services

Defense Health Agency (dha)

POSTED

about 14 hours ago

DEADLINE

CATIA V5 and V6 Translator Software Support

Fleet Readiness Center

POSTED

about 14 hours ago

DEADLINE

InnovMetric PolyWorks Maintenance and Technical Support

Fleet Readiness Center

POSTED

about 14 hours ago

DEADLINE

IT Systems Support & Maintenance (Sustainment)The IT Systems Support and Maintenance subcontract focuses on providing critical technical support and sustainment for SRW infrastructure and software tools utilized by prime contractors on NGA projects. The scope of work includes system administration, troubleshooting, and software patching conducted within secure cloud or on-premise server environments specific to the NGA. Key deliverables for this effort include maintaining system uptime, providing detailed maintenance logs, and ensuring the timely resolution of technical support tickets. This opportunity is issued under the Department of Defense and falls under NAICS code 541519. Due to the sensitive nature of the work, all personnel must be US citizens and possess a defense facility security clearance. Interested parties should note the response deadline of December 12, 2026.

Attn: Ms S84 - Ocs

POSTED

about 14 hours ago

DEADLINE

Authorized IT Software ResellerThis subcontract opportunity, titled Authorized IT Software Reseller, involves the procurement and administrative fulfillment of Tungsten software licenses for prime contractors supporting the Naval Criminal Investigative Service in Quantico, Virginia. The selected provider will manage the purchase order process for proprietary software and facilitate the transfer of licenses from the original equipment manufacturer to the government agency. To be eligible, the contractor must hold recognized authorized reseller status and ensure strict compliance with FAR 252.204-7016 regarding Covered Defense Telecommunications Equipment. The project is designated as a total Small Business Set Aside under NAICS code 541519. Interested parties must submit their responses by November 17, 2026, at 3:00 PM. The primary deliverables for this engagement include the successful delivery of fulfilled purchase orders and the provision of software entitlements to the Department of Defense.

Ncis Quantico VA

POSTED

about 14 hours ago

DEADLINE

Audio-Visual (A/V) Equipment & Technical Support

NASA Shared Services Center

POSTED

about 14 hours ago

DEADLINE

More opportunities from Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Same awarding agency

Database Administration & SQL OptimizationThis subcontract opportunity, titled Database Administration and SQL Optimization, involves providing specialized database management and optimization services for prime contractors supporting Department of Veterans Affairs healthcare projects. The scope of work focuses on managing Microsoft SQL Server 2016 SP2 and 2022 environments, with a specific emphasis on configuring SQL Server Always On for high availability and supporting custom database code. Technical requirements include the use of SSRS Enterprise Edition, RedGate, and Toad Data Modeler to deliver optimized performance, reporting schemas, and comprehensive backup and recovery logs. The project is managed through the Technology Acquisition Center Nj under NAICS code 541513. Interested parties should note that the solicitation was posted on November 12, 2026, with a response deadline set for November 30, 2026.

Computer Facilities Management Services

POSTED

about 14 hours ago

DEADLINE

HL7 Healthcare Interoperability ServicesThe HL7 Healthcare Interoperability Services subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, seeks a provider to deliver specialized healthcare data standard expertise. The primary objective is to design and validate data exchanges using HL7 Standards to ensure seamless interoperability between VBECS and other VA systems, specifically including Cerner Millennium. Key responsibilities include performing critical data mapping for blood bank migrations and delivering comprehensive HL7 interface specifications and validated mapping documents. To qualify for this engagement, the provider must hold an HL7 Standard Certification of Version 2.6 or higher. This project falls under NAICS code 541512 and is intended to support prime contractors on VA health system projects. Interested parties must respond by November 30, 2026.

Computer Systems Design Services

POSTED

about 14 hours ago

DEADLINE

Full-Stack .NET/Azure DevOps EngineeringThis subcontract opportunity, titled Full-Stack .NET/Azure DevOps Engineering, supports the Department of Veterans Affairs through the Technology Acquisition Center Nj. The project focuses on agile software development and sustainment for VA healthcare software, requiring the delivery of validated software increments and source code. Technical requirements include developing bug fixes using Microsoft .NET Framework 4.5+, managing CI/CD pipelines within Microsoft Azure Government, and implementing Infrastructure as Code. The operational workflow utilizes Azure DevOps, Jira, and GitHub for sprint execution, with automated testing performed via xUnit and NUnit. This effort falls under NAICS code 541511. Interested parties must respond by November 30, 2026.

Custom Computer Programming Services

POSTED

about 14 hours ago

DEADLINE

FDA Medical Device Quality Management & Regulatory ComplianceThis subcontract opportunity with the Department of Veterans Affairs Technology Acquisition Center Nj focuses on providing regulatory oversight and quality assurance for prime contractors managing medical device software projects. The primary objective is to maintain a Quality Management System that adheres to ISO 13485:2016 and 21 CFR Part 820 standards. Key responsibilities include the preparation of FDA 510(k) applications, the management of Medical Device Reporting and Corrective and Preventive Actions, and the execution of hazard analyses and requirements traceability to ensure success during regulatory audits. The selected provider will be responsible for delivering compliance reports and audit-ready QMS artifacts. This effort falls under NAICS code 541611 and is associated with a response deadline of November 30, 2026. The contract ensures that all software development for VA medical devices meets stringent federal and international safety and quality regulations.

Administrative Management and General Management Consulting Services

POSTED

about 14 hours ago

DEADLINE

DA01--Veterans Health Information Systems and Technology (VISTA) Blood Establishment Computer Software (VBECS) Operations and Maintenance Support II

Solicitation # 36C10B27Q0056

The Department of Veterans Affairs is seeking a contractor to provide full lifecycle sustainment, operational support, and regulatory compliance services for the Veterans Health Administration's Blood Establishment Computer Software (VBECS), an FDA regulated Class II Medical Device Software product. The scope of work includes planning, developing bug fixes, testing, deploying, and continuously monitoring the system throughout the DevOps lifecycle. The contractor must ensure all system documentation maintains accuracy and traceability in accordance with FDA Quality System Regulations (21 CFR 820), ISO 13485:2016, and VA cybersecurity and privacy requirements. Additionally, the contractor is responsible for maintaining the system's Authority to Operate (ATO) by managing documentation within the SNOW Continuous Authorization and Monitoring environment and supporting security audits and reviews. The contract features a base period of 12 months with four optional 12-month extensions, totaling a maximum duration of 60 months. Technical requirements include a mandate that at least two staff members be HL-7 Standard Certified (version 2.6 or higher). Strict security protocols are in place, requiring the use of VA approved encryption, FIPS-validated hashes for software authenticity, and the provision of a Software Bill of Materials (SBOM). Physical deliveries of IT hardware must utilize tamper-evident packaging and maintain a documented chain of custody. All deliverables are subject to Section 508 scoping requirements and must be free of patient-safety deficiencies to prevent injury to Veteran patients.

Other Computer Related Services

POSTED

about 14 hours ago

DEADLINE

DF01--RFI - F5 Load Balancer Replacement (VA-27-00017931)

Solicitation # 36C10B27Q0089

The Department of Veterans Affairs Technology Acquisition Center is conducting market research via Request for Information 36C10B27Q0089 for the replacement and maintenance of F5 load balancers at the Financial Services Center data centers in Austin, Texas, and Philadelphia, Pennsylvania. The project requires the migration of current configurations to new BIG-IP r5920-DFs in a 1:1 manner, including the provision of hardware, software, and migration services. The final solution must be fully operational by October 1, 2027. The scope of work includes the delivery of three BIG-IP Appliances with FIPS 140 Ready Licenses, premium service subscriptions, and a combination of standard and premium consulting hours. Performance will be conducted remotely, with strict adherence to security and privacy standards including FISMA, HIPAA, and VA Cybersecurity directives. Key deliverables include a pre-implementation call within three business days of award, a project management plan, and monthly progress reports. The government is seeking Rough Order of Magnitude pricing and capability statements from respondents, specifically inquiring about small business and SDVOSB status. While final evaluation factors and the acquisition strategy are still being determined, the requirement specifies a brand-name restriction to F5 manufacturers and authorized distributors, with strict prohibitions against gray market goods.

Other Computer Related Services

POSTED

about 14 hours ago

DEADLINE

RS Means Data Online FedRamp Complete Plus Software ProviderThis subcontract through the Department of Veterans Affairs Technology Acquisition Center Nj provides prime contractors with access to the RS Means Data Online FedRamp Complete Plus software platform. The agreement covers software licenses for up to 50 users hosted within a FedRAMP-authorized cloud environment, ensuring secure access to critical data for technology projects. The scope of delivery includes active software subscriptions and comprehensive technical documentation. Key deliverables focus on Enterprise Governance tools, source citation features, and specialized LLM evaluation tools, which include benchmark scoring and bias evaluation results. The contract is categorized under NAICS code 513210.

Software Publishers

POSTED

DEADLINE

SSI Tools Bundled Package Maintenance and SupportThe SSI Tools Bundled Package Maintenance and Support subcontract is issued by the Department of Veterans Affairs Technology Acquisition Center Nj to provide ongoing technical support and maintenance for prime contractors. The scope of work involves managing software updates and technical troubleshooting for 13 perpetual licenses. If artificial intelligence is employed during delivery, the contractor must comply with the VA Trustworthy AI Framework and OMB M-26-04. This opportunity is designated as a Veteran-Owned Small Business Set-Aside under NAICS code 541519, with the place of performance located in Washington, DC. Interested parties must respond by November 17, 2026, to provide active maintenance and support coverage for the specified license count.

Other Computer Related Services

POSTED

DEADLINE

SSI Tools Bundled Package Perpetual LicensesThis subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, provides perpetual, nonexclusive software licenses for the SSI Tools Bundled Package. Intended for prime contractors on VA technology projects, the agreement covers up to 10 new perpetual activations delivered electronically via license keys. The software must adhere to TAA compliance and Section 508 accessibility standards, and any provider who is not the original manufacturer must submit an OEM authorization letter. The opportunity is designated as a Veteran-Owned Small Business Set-Aside under NAICS code 513210, with the place of performance located in Washington. Interested parties must respond by November 17, 2026.

Software Publishers

POSTED

DEADLINE

DA10--RS Means Data Online FedRamp Complete Plus (VA-27-00020013)

Solicitation # 36C10B27Q0119

The Department of Veterans Affairs is issuing a Request for Information to identify qualified vendors for the renewal of a brand-name RS Means Data Online FedRAMP Complete Plus subscription. The requirement involves a cloud-based platform that must comply with the VA OIT Technical Reference Model, VA Critical Security Controls, and Section 508 ICT standards. Key deliverables include the electronic delivery of software access within 30 days of contract processing, quarterly cost data updates, and a comprehensive AI System/LLM Development and Operation Documentation Package, including compliance monitoring and corrective action plans to ensure unbiased AI outputs. The solution must also support IPv6-Only connectivity. The proposed period of performance consists of a 12-month base period followed by two 12-month option periods, with an optional task for up to 50 additional licenses per period. Interested respondents must submit a capability package of no more than six pages by November 17th at 9:00 AM EST. Submissions must include company identification, a technical approach, and a history of similar work with the VA. Small businesses, specifically SDVOSB and VOSB firms, must provide detailed information regarding their ability to meet set-aside requirements and disclose the percentage of work performed by eligible firms.

Other Computer Related Services

POSTED

DEADLINE

Brand Name or Equal Structured Solutions, INC Tools Bundled Package

Solicitation # 36C10B27Q0076

Solicitation 36C10B27Q0076 is a Request for Quotation issued by the Department of Veterans Affairs Technology Acquisition Center for a Brand Name or Equal Structured Solutions, INC (SSI) Tools Bundled Package. This firm-fixed-price action is a total Veteran Owned Small Business (VOSB) set-aside, restricted to VIP-listed VOSBs and SDVOSBs. The requirement is for up to 10 new perpetual software activations for end users, including one year of maintenance and support. The contract structure includes a base period followed by two optional 12-month extension periods. Award will be granted to the lowest priced, responsive, and responsible offeror who submits a quote on an all-or-none basis. The scope of work requires the delivery of a perpetual, nonexclusive license for use in a networked environment, with delivery and acceptance occurring at the destination. All deliverables must conform to Section 508 accessibility standards, and the contractor is responsible for any necessary remediation at their own expense. If artificial intelligence is utilized, the contractor must adhere to the VA Trustworthy AI Framework and OMB M-26-04, providing a signed Statement of Attestation, compliance monitoring plans, and maintaining commercially reasonable insurance for AI-related claims. Offerors must provide detailed product descriptions and, if not the original equipment manufacturer, an authorization letter from the OEM.

Other Computer Related Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Get full access

Join 750+ contractors already using CLEATUS