Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

GRC Platform Deployment and Implementation Services

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Commerce SspoView Agency

NAICS

541513 - Computer Facilities Management ServicesView NAICS

Place of Performance

Washington, DC, 20230, USA

Set-Aside

NONE

Documents

This scope was carved out of GG000000-26-00063.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Cloud-Based GRC / Cyber Risk Compliance Automation Platform (FISMA High SaaS)

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Commerce Sspo
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Commerce Sspo
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Performs GRC platform deployment for prime contractors on Department of Commerce projects. Establishes secure M365/Azure connectivity, configures the platform for FISMA requirements, onboards five information systems, and integrates the JCAM reporting pipeline. Requires expertise in NIST SP 800-53, 800-37, and 800-137 and proven experience in federal FISMA High environments. Delivers a fully operational GRC platform.

Similar Contracts

Same NAICS industry code

More opportunities from Department Of Commerce Sspo

Same awarding agency

NAICS: 236220
New
Federal
Table Mountain T1 and B9 Renovation
Solicitation # 1331L526TBRENOVAT
The Department of Commerce, on behalf of the NTIA Institute for Telecommunications Sciences, is soliciting a firm-fixed-price contract for the renovation of buildings T1 and B9 at the Table Mountain Field Site in Longmont, Colorado. This project is a 100 percent small business set-aside under NAICS 236220. The scope of work requires a design-build approach prior to construction, with a period of performance not to exceed two years from the date of award. Key renovations for building T1 include HVAC and electrical panel upgrades, window and door replacement, new flooring, roof and deck replacement, and interior and exterior painting. Building B9 requirements include ADA-compliant bathroom remodeling, a high-efficiency electric HVAC system, 3-phase electrical panel upgrades, floor polymer coating, roof gutter repair, and the use of Rhino shield elastomeric coating for painting. The contractor must also manage asbestos-containing adhesives found in the interior walls of building B9. The government will award the contract based on best value using a trade-off method of analysis, prioritizing superior non-price capabilities over the lowest price. Evaluation factors include technical approach, experience, and past performance from the last three years, all of which are collectively more important than the price quote. Submissions must be divided into a technical quote and a price quote, with the technical section limited to 15 pages. Compliance requirements include adherence to Davis-Bacon prevailing wage rates for heavy construction in Colorado and specific insurance minimums, including 500,000 dollars for general liability and 100,000 dollars for employer liability. Quotes are due by September 21, 2026, at 10:00am MTN.
Commercial and Institutional Building Construction

POSTED

about 7 hours ago

DEADLINE

in 3 days
View Details
NAICS: 541330
New
Federal
DOC Architect and Engineering IDIQ
Solicitation # AA-FEQ-WC-O-26-00495
The Department of Commerce is conducting market research through a Request for Information (RFI) under solicitation number AA-FEQ-WC-O-26-00495 to gather industry input for a potential Indefinite-Delivery Indefinite-Quantity (IDIQ) contract for Architect and Engineering services. This RFI, posted on June 2, 2026, with a submission deadline of June 16, 2026 at 2:00 p.m., is solely for information gathering and does not constitute a solicitation for proposals or a commitment to award a contract. Respondents must submit their responses exclusively via a designated Microsoft Form, and direct communication with the Government Point of Contact via email is prohibited. The NAICS code for this effort is 541330, and the contract will support the renovation of the historic Herbert C. Hoover Building in Washington, DC, requiring multi-discipline architectural and engineering services including planning, assessments, and design deliverables across multiple phases from concept through final sign-off. All work must adhere to GSA P100 standards, involve licensed professionals who sign and seal deliverables as required by law, and comply with federal, state, and local regulations concerning safety, hazardous materials, and environmental compliance. The government anticipates awarding firm fixed-price IDIQ contracts with a five-year period of performance, including a base year and four option years. Contractors must maintain all required professional licenses at their own expense, ensure personnel are qualified and trained, and comply with stringent security protocols including facility access screenings, information security awareness training, OPSEC requirements, and reporting of security violations. Deliverables must be submitted in specified electronic formats including MS Office, PDF, CAD, and BIM, and must meet exacting inspection criteria—being complete, coordinated, and free of critical or life-safety deficiencies. Offerors must provide their Unique Entity Identifier, self-certify their socioeconomic status, indicate applicable NAICS codes, and disclose any existing governmentwide contract vehicles they hold. The government reserves the right to contact respondents for clarification and will not reimburse costs incurred in responding to this RFI.
Engineering Services

POSTED

1 day ago

DEADLINE

in 28 days
View Details
NAICS: 513210
New
Federal
Cloud-Based GRC / Cyber Risk Compliance Automation Platform (FISMA High SaaS)
Solicitation # GG000000-26-00063
The Department of Commerce Shared Services Procurement Office, acting for the Office of Inspector General, is soliciting a commercial cloud-based Governance, Risk, and Compliance (GRC) automation platform. This acquisition is specifically for a Software-as-a-Service (SaaS) solution to automate FISMA documentation, AI-assisted control drafting, and continuous monitoring reporting for up to five information systems within a FISMA High categorization boundary. The objective is to utilize automation and AI to sustain the Risk Management Framework (RMF) lifecycle and audit support without increasing security staffing. The procurement will result in a Firm-Fixed-Price Purchase Order with a base period of 12 months from award, utilizing a Best Value Tradeoff source selection process. Key technical requirements include an active FedRAMP High authorization at the time of submission, as FedRAMP Moderate or Ready statuses are not acceptable. The solution must integrate with Microsoft 365, Azure Active Directory (Entra ID), and the Microsoft Graph API, and must provide a private B2B connectivity option such as Azure Private Link or ExpressRoute. All data transmissions must be encrypted using TLS 1.2 or higher and FIPS 140-2/140-3 validated modules. Offerors must provide a technical quotation and a price quotation by September 28, 2026, including itemized costs for software licensing and professional deployment services. Evaluation will be based on requirement understanding, solution identification, mandatory requirement compliance, and the provision of at least two federal customer references.
Software Publishers

POSTED

1 day ago

DEADLINE

in 10 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS