This Government Contract opportunity from Department Of The Treasury was posted on September 1, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

ICT Security Compliance and FISMA Auditing

Closed

Federal

Submission Closed09/14/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541690

New

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. Performance for this contract will take place in California. This solicitation is specifically set aside for Small Businesses, including SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

DEADLINE

Information Security Framework Alignment SpecialistThe Information Security Framework Alignment Specialist subcontract supports prime contractors on Ohio Department of Public Safety projects by performing critical audits and security alignment. The primary scope of work involves mapping Commvault security controls to established frameworks, including NIST 800-53, NIST 800-171, or CMMC, while utilizing specialized auditing tools to conduct comprehensive security gap analyses. Key deliverables for this engagement include risk assessments, security alignment documentation, and detailed compliance reports. Qualified candidates must hold professional certifications such as CISSP, CISM, or specific NIST/ISO framework credentials. This opportunity is categorized under NAICS code 541690 and is associated with the Department of Public Safety's Information Technology division. Interested parties should note the response deadline of November 16, 2026.

Dps760000 Information Technology Cdsb, Dps-dept Of Public Safety

POSTED

DEADLINE

Railway Safety Management System (SMS) Auditing and ReportingThis subcontract involves performing comprehensive audits of Railway Safety Management Systems files for prime contractors working on City of Tshwane railway projects in Tshwane-Pretoria, South Africa. The selected provider is responsible for reviewing current files to ensure full compliance with railway safety standards and delivering a detailed audit report. The contractor must provide all technological equipment necessary to conduct the audits and generate the final documentation. To be eligible, applicants must possess B-BBEE status, CSD registration, and SARS Tax Compliance. The solicitation was posted on October 29, 2026, with a response deadline of November 11, 2026.

POSTED

DEADLINE

Maritime Security Consulting & Planning

POSTED

DEADLINE

Ballistic Vest Fitting SpecialistThis subcontract opportunity is for a Ballistic Vest Fitting Specialist to provide professional sizing and fitting services for prime contractors supporting the Snohomish County Sheriff's Office. The selected specialist will be responsible for conducting fitting sessions for personnel using specialized sizing kits and measurement tools to ensure that equipment meets all requirements for form, fit, and function during daily law enforcement operations and extended wear. The final deliverable for this engagement is the submission of completed sizing and fitting reports for all personnel. Interested parties must provide references demonstrating that they have performed similar services for at least one year. This opportunity was posted on October 29, 2026, with a response deadline of November 17, 2026. The project falls under NAICS code 541690 and is associated with the agency of Snohomish County in Washington.

POSTED

DEADLINE

Educational Privacy Compliance & Audit Services

DOD Education Activity

POSTED

DEADLINE

Network Security & CSfC Compliance ConsultingThis subcontract for Network Security and CSfC Compliance Consulting supports prime contractors on DARPA FastVacc projects by providing specialized domain expertise. The primary objective is to validate automated tools against rigorous security standards, specifically defining ground truth for Zero Trust Architecture and CSfC capability packages to ensure the technical accuracy of tool outputs. The selected provider must possess expert-level certifications, such as CISSP or CISM, to deliver critical validation reports, test cases, and professional policy interpretations. This effort falls under NAICS code 541690 and is managed under the Department of Defense for the Defense Advanced Research Projects Agency.

Defense Advanced Research Projects Agcy

POSTED

DEADLINE

Diminishing Manufacturing Sources and Material Shortages (DMSMS) Consultant

POSTED

DEADLINE

Data Processing and Statistical Weighting ServicesThe Department of Veterans Affairs, specifically Rpo East, is seeking a subcontractor to provide Data Processing and Statistical Weighting Services for longitudinal studies. The selected provider will be responsible for cleaning raw data sourced from web and CATI platforms and calculating statistical weights to address Veteran oversampling. This work requires deep expertise in longitudinal survey methodology and proficiency in statistical analysis software such as SAS, SPSS, Stata, or R. The primary deliverables for this engagement include cleaned datasets and survey weights for both baseline and follow-up waves. Interested parties should note that the response deadline is November 13, 2026, and the services fall under NAICS code 541690.

POSTED

DEADLINE

Supply Chain Intelligence & Risk Research (SME Services)This subcontract for Supply Chain Intelligence and Risk Research provides subject matter expertise to the Department of Defense Weapons agency, specifically supporting Air Force Life Cycle Management Center munition programs. The primary objective is to perform deep-dive research and analysis into the origins of raw materials used by prime contractors. This involves mapping complex supply chains from end items back to raw materials while conducting comprehensive financial, manufacturing, and geopolitical risk assessments of suppliers. To execute these tasks, the contractor will utilize financial risk databases and market intelligence tools to identify vulnerabilities. The final deliverables consist of detailed supply chain maps and risk assessment reports. The opportunity is categorized under NAICS code 541690, with a response deadline of November 16, 2026, and performance located in zip code 32548.

POSTED

DEADLINE

SPII Compliance and Data Security ServicesThis small business set-aside subcontract, titled SPII Compliance and Data Security Services, is issued by the Department of Homeland Security's Incident Support Section. Based in Washington, the contract focuses on providing critical security infrastructure and sensitive personally identifiable information compliance management for prime contractors working on FEMA Individual Assistance projects. The scope of work involves the implementation of DHS Management Directive 11042.1 and Policy Directive 4300A, alongside the management of DHS Form 11000-6 non-disclosure agreements. The service provider is responsible for maintaining a secure data handling environment and utilizing encrypted transmission tools to monitor for sensitive information incidents. All operations must strictly adhere to the DHS 4300A Sensitive Systems Handbook. Key deliverables include the provision of regular compliance reports to ensure all data security protocols are met and maintained throughout the project lifecycle.

Incident Support SECTION(ISS70)

POSTED

DEADLINE

Senior Advisor 2 for Biological Therapeutics Development to act as External Oversight Committee (EOC) Subject Matter Expert (SME) Services.

Solicitation # 7571PSQ00013

Solicitation 7571PSQ00013 is a small business set-aside for a Senior Advisor 2 Subject Matter Expert to support the NIH HEAL Initiative and the Blueprint Neurotherapeutics Network for Biologics. The selected contractor will serve on the External Oversight Committee, providing executive-level strategic guidance, programmatic reviews, and mentorship to advance non-opioid drug discovery and development. The scope of work emphasizes expertise in biologics, including candidate discovery, IND-enabling studies, early-phase clinical trials, and regulatory compliance regarding Chemistry, Manufacturing, and Controls. The contract is a Firm Fixed Price purchase order with a base period from November 13, 2026, to November 14, 2027, and two subsequent one-year options. The anticipated level of effort is 50 labor hours per year, with an annual travel reimbursement limit of 2,000 dollars per consultant. Awards will be based on best value, with technical personnel qualifications weighted at 100 points and considered significantly more important than price and past performance. Proposed key personnel must provide resumes and letters of commitment, and their direct annual salary is capped at the Executive Schedule, Level II. Performance will primarily occur at the contractor site, with occasional on-site visits to Bethesda, Maryland. Contractors must adhere to strict security protocols, including annual NIH Security and Privacy Training and the signing of a non-disclosure agreement. Invoicing must be processed electronically through the Department of Treasury Invoice Processing Platform. Quotes are due by November 5, 2026, and must include a completed pricing template, a technical narrative, and up to two relevant past performance examples.

Omas Strategic Buying Center - Professional Services

POSTED

about 22 hours ago

DEADLINE

in 6 days

AI Contract Overview

The ICT Security Compliance and FISMA Auditing subcontract is a small business set-aside opportunity with the Department of the Treasury's IT Strategy and Modernization agency. Based in Washington, the contract focuses on providing security compliance auditing for prime contractors working on Treasury IRS AV/VTC projects. Key technical requirements include the implementation of NIST 800-53 Rev. 5 controls and IRS Publication 4812 standards, as well as the validation of FIPS 140-3 cryptographic modules to ensure secure data encryption for information both at rest and in transit. The selected provider will be responsible for developing critical security documentation, including System Security Plans, Security Risk Assessments, and Software Bill of Materials in accordance with OMB Memo 22-18. Deliverables consist of comprehensive security certifications and audit reports. Candidates must possess MBI clearance to perform this work. The response deadline for this opportunity is September 14, 2026.

General Info

Small business subcontract for Treasury ICT security compliance, FISMA auditing, and NIST standards.

Agency

Department Of The Treasury → It Strategy And Modernization

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Washington, DC, USA

Set-Aside

SBA

Documents

This scope was carved out of 205AE9-26-Q-00053.

The full solicitation package (11 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

IRS Audio-Visual (AV) and Video Teleconferencing (VTC) Enterprise Systems Integration, Support, and Maintenance Master IDIQ

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedSep 1

subcontract

Response DeadlineSep 14

Deadline has passed

Submission Closed

09/14/2026, 09:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of The Treasury → It Strategy And Modernization

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of The Treasury → It Strategy And Modernization

Office AddressN/A

ContactsNo contact information available

Full Description

Performs security compliance auditing for prime contractors on Treasury IRS AV/VTC projects. Implements NIST 800-53 Rev. 5 controls and IRS Publication 4812 standards. Validates FIPS 140-3 cryptographic modules for data encryption at rest and in transit. Develops System Security Plans (SSP), Security Risk Assessments (SRA), and Software Bill of Materials (SBOM) per OMB Memo 22-18. MBI clearance required. Delivers security certifications and audit reports.