Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Independent Security Assessment and Authorization (A&A)

Open

State & Local

Response Deadline12/07/2026, 05:00:00 PM PST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

California Department of Consumer Affairs

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

CA, USA

Set-Aside

NONE

Documents

This scope was carved out of OIS-25-26-020.

The full solicitation package (8 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Pre-Solicitation for CSBP Business Modernization

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 7

subcontract

Response DeadlineDec 7

Submission deadline

Response Deadline

12/07/2026, 05:00:00 PM PSTin about 1 month

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia Department of Consumer Affairs

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia Department of Consumer Affairs

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs independent third-party security testing and compliance auditing for prime contractors on California Department of Consumer Affairs projects. Conducts annual security testing, vulnerability scanning, and generates independent assessor reports per NIST SP 800-53 and California SAM/SIMM. Delivers Independent Security Assessment Reports and POA&M validation.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. Performance for this contract will take place in California. Eligible firms include SBA certified Small Businesses, Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 7 hours ago

DEADLINE

Life Safety and Accessibility Compliance SpecialistThe Life Safety and Accessibility Compliance Specialist subcontract involves providing specialized regulatory reviews for prime contractors working on City of Hamilton corporate facility projects in Canada. The selected provider will be responsible for inspecting facilities to ensure fire and life safety code compliance and conducting AODA accessibility audits to identify and document physical barriers. The primary deliverables for this engagement are detailed deficiency reports and professional recommendations for necessary life safety and accessibility upgrades. To qualify for this role, the contractor must hold professional certification as either a Certified Fire Protection Specialist or an Accessibility Consultant. Interested parties must submit their responses by the deadline of December 8, 2026. This opportunity is categorized under NAICS code 541690 and is managed through the City of Hamilton's procurement system.

City of Hamilton

POSTED

about 11 hours ago

DEADLINE

in about 1 month

CMMC Level 2 Compliance SupportThis subcontract for CMMC Level 2 Compliance Support focuses on providing cybersecurity assessments and remediation services for prime contractors associated with DLA Weapons Support Land Supply Chain projects. The primary objective is to conduct CMMC Level 2 self-assessments and implement necessary safeguards to protect covered defense information, ensuring strict adherence to DFARS 252.204-7012 and NIST SP 800-171 frameworks. The final deliverables include a comprehensive compliance report and a completed self-assessment. The project is managed under NAICS code 541690 for the Department of Defense and will be performed in Corpus Christi, Texas. Interested parties should note the response deadline of November 16, 2026, for this specific cybersecurity initiative.

DLA WEAPONS SUPPORT LAND SUPPLY CHAIN

POSTED

about 13 hours ago

DEADLINE

Privacy Impact Assessment (PIA) SpecialistThe Regional District of Nanaimo is seeking a Privacy Impact Assessment Specialist to provide expert privacy consulting for prime contractors involved in data collection projects. The selected subcontractor will be responsible for developing critical documentation regarding survey methodology, data storage, security, and retention practices to ensure the successful completion and approval of a Privacy Impact Assessment. A deep professional knowledge of the Freedom of Information and Protection of Privacy Act is required for this role. The primary deliverables for the contract include a comprehensive data management plan and all necessary completed PIA documentation. This opportunity is based in Canada and is categorized under NAICS code 541690.

Regional District of Nanaimo

POSTED

about 13 hours ago

DEADLINE

PPE Program Administration and Sizing ServicesThis subcontract for PPE Program Administration and Sizing Services supports prime contractors on Northern Wasco County PUD projects in The Dalles, Oregon. The selected provider will manage the administrative aspects of clothing programs, which includes conducting employee sizing sessions and ensuring the ordering and issuance of garments are completed within 10 business days. Additionally, the contractor is responsible for maintaining detailed records of garment types and ratings while delivering regular sizing records and inventory reports. Beyond logistics, the contractor must provide essential technical and regulatory guidance to ensure all protective clothing meets OSHA and OAR requirements. Interested parties should note that the response deadline for this opportunity is November 25, 2026, and the services fall under NAICS code 541690.

Northern Wasco County PUD

POSTED

about 14 hours ago

DEADLINE

Global Fire Risk Assessment InspectionsThe Global Fire Risk Assessment Inspections subcontract, issued by FCDO Services, requires the performance of on-site fire risk assessments for prime contractors managing FCDO facility projects. The scope of work involves conducting physical inspections of both owned and rented buildings to identify potential hazards and evaluate overall safety compliance. These services will be delivered across a diverse global portfolio, including sites within the UK, British Overseas Territories, and various international posts. The primary deliverable for this engagement is the production of completed Fire Risk Assessment reports for every inspected site. Interested parties should note that the response deadline for this opportunity is December 11, 2026. The contract is categorized under NAICS code 541690, focusing on specialized professional services to ensure the safety and regulatory compliance of the agency's global infrastructure.

POSTED

about 15 hours ago

DEADLINE

in about 1 month

HVIP Performance Measurement and Data AnalysisThe HVIP Performance Measurement and Data Analysis subcontract supports the New Jersey Department of Law and Public Safety by providing specialized data collection and performance measurement for prime contractors. The selected provider will be responsible for developing tracking tools to monitor performance measures and conducting detailed analyses to determine how specific interventions impact retaliation rates. This role requires a high level of expertise in evidence-based model evaluation and strict adherence to victim data privacy laws. Key deliverables for this engagement include the production of comprehensive data reports, performance metrics, and final implementation reports. Interested parties should note that the response deadline is November 24, 2026, and the project falls under NAICS code 541690.

NJ Department of Law and Public Safety

POSTED

about 17 hours ago

DEADLINE

Clinical Research Statistical Analysis ServicesThis subcontract for Clinical Research Statistical Analysis Services supports prime contractors on NIH/NIMHD research network projects. The scope of work involves developing statistical analysis plans, performing analysis on harmonized datasets, and providing essential support to the Data and Safety Monitoring Board. All technical work must be executed using SAS, R, or Stata while strictly adhering to NIH statistical guidelines and peer-review standards to ensure the delivery of validated data outputs and comprehensive statistical analysis reports. The project is associated with the National Institutes of Health and the Department of Health and Human Services, with the place of performance located in Bethesda. Interested parties should note the response deadline of November 23, 2026. The opportunity is categorized under NAICS code 541690, focusing on specialized biostatistical expertise to maintain the integrity of clinical research data.

National Institutes Of Health Nichd

POSTED

about 18 hours ago

DEADLINE

MRI Safety Consulting and Program ManagementThis subcontract for MRI Safety Consulting and Program Management supports prime contractors on projects for the Department of Veterans Affairs Central California Health Care System. The selected provider will deliver subject matter expertise to establish and maintain MR safety and quality assurance programs, which includes developing local safety rules, creating MRI-conditional implant protocols, and conducting root cause analyses for adverse events in accordance with ACR MR Safety standards. Qualified candidates must hold certification from the ABR, ABMP, or CCPM to ensure professional oversight of the program. Key deliverables include comprehensive MR Safety Program documentation and specific device protocols. The work is associated with NAICS code 541690 and will be performed at 500 North Santa Fe Street.

261-NETWORK Contract Office 21 (36C261)

POSTED

about 18 hours ago

DEADLINE

Security Records and Background Screening ServicesThe Security Records and Background Screening Services subcontract involves performing comprehensive records checks for prime contractors working on Air Force facility projects in Tinian. The selected provider will be responsible for conducting personnel and vehicle authorization inquiries utilizing the NCIC, CLETS, and Pass and Decal databases to deliver verified background reports. Strict adherence to the Privacy Act of 1974 is required for all data handling, and the contractor must possess the necessary authorization to access law enforcement databases. This opportunity is issued by the Department of Defense under NAICS code 541690, with a response deadline of November 18, 2026.

FA5025 356 Eceg Pk

POSTED

about 18 hours ago

DEADLINE

H365--Diagnostic Medical Physics for the VA Central California Health Care System

Solicitation # 36C26127Q0156

The Department of Veterans Affairs Network Contracting Office 21 is seeking information from qualified contractors to provide diagnostic medical physics support and services for the VA Central California Health Care System in Fresno and Visalia, California. Under NAICS code 5416190, the scope of work includes annual performance testing of imaging equipment, quality control surveys for x-ray, nuclear medicine, PET/CT, ultrasound, and MRI units, and the provision of shielding design calculations. The contractor must manage MR safety programs and ensure compliance with regulatory standards including 29 CFR 1910.1096, ACR Technical Standards, the Mammography Quality Standards Act, and NCRP Report No. 147. Key deliverables include electronic reports due within 10 working days of inspection and final written reports within 30 working days. The period of performance begins March 1, 2027, and ends February 29, 2028, with four subsequent option years extending through February 29, 2032. Interested parties must submit a response by November 13, 2026, including their socioeconomic status, SAM Unique Entity Identifier, a capabilities statement, and proof of certification from the American Board of Radiology, American Board of Medical Physics, or the Canadian College of Physicists in Medicine. To be considered responsive, applicants must provide a price estimate and demonstrate compliance with subcontracting limitations per FAR 52.219-14, FAR 52.219-27, and VAAR 852.219-74 for those identifying as small businesses or SDVOSB/VOSB.

261-NETWORK Contract Office 21 (36C261)

POSTED

about 18 hours ago

DEADLINE

Cybersecurity & Compliance AuditingThis subcontract for Cybersecurity and Compliance Auditing provides independent security verification for prime contractors working on Washington Department of Enterprise Services and NASPO projects. The scope of work involves auditing card programs against federal and industry standards through the use of vulnerability scanners and SIEM tools to ensure strict adherence to PCI DSS, SOC 2 Type II, and NIST frameworks. The selected provider will be responsible for delivering comprehensive security certifications and compliance audit reports. The opportunity is categorized under NAICS code 541690 and will be performed across multiple counties. Interested parties must note the response deadline of November 17, 2026, for this engagement with the Washington Department of Enterprise Services.

Enterprise Services , Department. of

POSTED

about 22 hours ago

DEADLINE

More opportunities from California Department of Consumer Affairs

Same awarding agency

Native Mobile App Development

Custom Computer Programming Services

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Accessibility (Section 508/WCAG) Testing

Custom Computer Programming Services

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Government Agency Interface Integration

Custom Computer Programming Services

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Data Conversion and ETL Development

Custom Computer Programming Services

POSTED

about 6 hours ago

DEADLINE

in about 1 month

SaaS Configuration and Customization Services

Custom Computer Programming Services

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Core SaaS Licensing and Hosting

Software Publishers

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Pre-Solicitation for CSBP Business Modernization

Solicitation # OIS-25-26-020

The California Department of Consumer Affairs, through the State Board of Pharmacy, is seeking a contractor to modernize its business operations by replacing aging legacy systems with a cloud-based Software as a Service solution. This project, identified as solicitation OIS-25-26-020, aims to implement a comprehensive system for application, renewal, compliance, payment, inspection, and reporting. The contractor will be responsible for the design, configuration, integration, deployment, and ongoing maintenance of the solution using a hybrid-agile scrum methodology. The project is structured into four phases, with a base contract term of 36 months and a timeline spanning from October 2027 through October 2030. The solution must adhere to strict technical and security standards, including WCAG 2.2 Level AA for accessibility and NIST SP 800-53 Rev. 5 and the NIST Cybersecurity Framework for security. Compliance with FedRAMP and California SAM/SIMM policies is required, and the system must integrate with DCA/OIS Single Sign-On for role-based access control. Evaluation of bidders will be based on a point system regarding how functional requirements are met, favoring out-of-the-box capabilities over customization, and will include a cost evaluation covering base deliverables, maintenance, and continuous enhancements.

Computer Systems Design Services

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS