Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Information Assurance and ISSO Services

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Information Assurance and ISSO Services supports the Department of Homeland Security Science & Technology Acquisition Division. The selected provider will deliver security advisory services for prime contractors on OCIO projects, focusing on the implementation of DHS 4300 policy and the management of daily security operations. Key responsibilities include maintaining IT Security Plans, conducting vulnerability scans, and managing ISVM responses while aligning operations with FEAF and TOGAF frameworks. The contract is a Total Small Business Set-Aside under NAICS code 541519, with performance located in Reston, Virginia. Due to the nature of the work, a high-level security clearance is required. Deliverables consist of updated IT Security Plans, comprehensive vulnerability scan reports, and detailed ISVM remediation logs to ensure the security and integrity of the agency's information systems.

General Info

Small business subcontract for DHS security advisory and ISSO services in Reston, Virginia.

Agency

Department Of Homeland Security → Sci Technology Acq Division

NAICS

541519 - Other Computer Related Services

Place of Performance

Reston, VA, 20191, USA

Set-Aside

SBA

Documents

This scope was carved out of 70RSAT25FC0000007.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Information Technology Support Services (ITSS)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedJul 7

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Homeland Security → Sci Technology Acq Division

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Homeland Security → Sci Technology Acq Division

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security advisory services for prime contractors on DHS Science & Technology OCIO projects. Implements DHS 4300 policy, manages day-to-day security operations, maintains IT Security Plans, and conducts vulnerability scans and ISVM responses. Aligns operations with FEAF and TOGAF frameworks using vulnerability scanning tools. Requires high-level security clearance. Delivers updated IT Security Plans, vulnerability scan reports, and ISVM remediation logs.

Similar Contracts

Same NAICS industry code

Building Automation Systems (BAS) SupportThis subcontract for Building Automation Systems (BAS) Support involves the operation and maintenance of BAS for prime contractors on Transbay Joint Powers Authority facility projects. The selected provider will be responsible for managing BAS consoles, data gathering panels, and remote sensors to optimize system set-points for enhanced energy efficiency and occupant comfort. Key deliverables include the provision of optimized building control systems and the delivery of detailed operational data reports. Qualified candidates must hold relevant BAS Certification, such as Niagara, and ensure full compliance with DIR Prevailing Wage requirements. The solicitation was posted on October 23, 2026, with a response deadline of December 4, 2026. This opportunity falls under NAICS code 541519 and is managed through the California Procurement agency.

POSTED

DEADLINE

in about 1 month

RFO #5895537584 Senior Test Analyst

Solicitation # 5895537584

The California State Teachers' Retirement System (CalSTRS) is soliciting a Senior Test Analyst under solicitation number 5895537584 to support the BenefitConnect pension administration system. The selected professional will act as a Test Coordinator, utilizing the System Development Life Cycle (SDLC) methodology to develop test strategies, plans, cases, and traceability matrices. Key responsibilities include performing quality reviews of test cases, managing risk-based testing, documenting defects via Problem Incident Reports, and supporting regression testing during maintenance releases. The role requires proficiency in Test Application Lifecycle Management tools such as Jama, HP ALM, or Rational Requisite Pro. Eligible respondents must hold a current Information Technology California Multiple Award Schedule (CMAS) agreement and submit their offers by November 6, 2026. The award process is structured in five phases, beginning with a pass/fail minimum qualifications review, followed by a technical qualification score (70 points) and a cost comparison (30 points). Top candidates may undergo optional interviews and reference checks before final cost negotiations. The contract includes strict compliance requirements regarding background investigations, information security and privacy addendums, and California state laws, including the Political Reform Act and the Child Support Compliance Act. Invoicing is managed monthly in arrears through the SAP Business Network.

State Teachers' Retirement System

POSTED

DEADLINE

Accessibility Quality Assurance (QA) and Manual TestingThis subcontract for Accessibility Quality Assurance and Manual Testing involves providing independent verification and validation of remediated documents for prime contractors working on San Bernardino County projects. The selected provider will perform automated accessibility checks and manual testing utilizing JAWS and NVDA screen readers to ensure all deliverables conform to ADA Title II Rule H and DOJ regulations. The final output consists of certified compliant documents and detailed QA Validation Reports. The opportunity is categorized under NAICS code 541519 and requires the contractor to hold either SOC 2 Type II or ISO 27001 certification. Interested parties must submit their responses by November 13, 2026, for work to be performed in San Bernardino, California.

POSTED

DEADLINE

Electronic Document Accessibility Remediation (Production)This subcontract for Electronic Document Accessibility Remediation involves providing technical remediation services for prime contractors working on San Bernardino County projects. The scope of work focuses on ensuring that native PDF, Word, Excel, and PowerPoint files are fully compliant with ADA Title II Rule H and DOJ regulations. Key tasks include setting document properties, creating navigational bookmarks, and correcting tagged hyperlinks to deliver accessibility-compliant electronic documents. To qualify for this engagement, service providers must utilize specialized accessibility remediation software and maintain either SOC 2 Type II or ISO 27001 certification. The project is categorized under NAICS code 541519 and is managed by the Purchasing agency in California, with the place of performance located in San Bernardino. The response deadline for this opportunity is November 13, 2026.

POSTED

DEADLINE

Video Analytics and Technical Support ServicesThis subcontract for Broward County, Florida, involves providing specialized video analytics and technical support services to prime contractors managing county security projects. The scope of work focuses on the configuration of appliance-based execution environments designed for real-time person-of-interest tracking, alongside the delivery of configured analytics profiles and adherence to established technical support service level agreements. To ensure system integrity and security, the contractor is responsible for performing ongoing Nessus vulnerability assessments. The contract mandates that all technical support be provided by factory-certified personnel. Interested parties must respond by November 16, 2026, under NAICS code 541519.

POSTED

DEADLINE

AV Systems Integration and ConfigurationThis subcontract for AV Systems Integration and Configuration involves providing specialized technical setup and signal routing services for prime contractors on projects at Texas A&M University-Kingsville. The scope of work focuses on the configuration of LED controllers, pixel pitch mapping, and the integration of display walls with university media servers or AV feeds through the use of control software and signal processors. The ultimate goal is the delivery of a fully calibrated and operational visual display system. The project is categorized under NAICS code 541519 and requires strict adherence to the university's insurance standards. Interested parties should note that the solicitation was posted on October 23, 2026, with a response deadline set for November 7, 2026.

Texas A&M University – Kingsville

POSTED

DEADLINE

Horizon3.ai NodeZero Autonomous Penetration Testing Annual Subscription Renewal

Solicitation # IQ20261023

The City of Tamarac is soliciting quotes for a one year renewal of the Horizon3.ai NodeZero Autonomous, Continuous Penetration Testing Annual Subscription under solicitation number IQ20261023. The subscription, identified by part number N0-AS-XXXX-491, covers a license size of 1,000 IP addresses for a term beginning November 28, 2026, and ending November 27, 2027. Responses to this solicitation are due by November 6, 2026. To be eligible for award, offerors must provide several mandatory certifications and legal affidavits. These include a non-collusive affidavit, an anti-human trafficking affidavit, and an affidavit of compliance with foreign entity laws ensuring the entity is not owned or controlled by a foreign country of concern. Additionally, contractors must certify compliance with Florida Statutes regarding scrutinized companies, specifically confirming they do not boycott Israel and have no prohibited activities in Sudan, Iran, or Syria. Contractors and their subcontractors are also required to register with and use the E-Verify system for employee work authorization. Corporations must submit a certified resolution to verify that the individual executing the bid is properly authorized to do so on behalf of the entity.

City of Tamarac

POSTED

DEADLINE

Learning Management System (LMS) Administration & SupportThis subcontract for Learning Management System (LMS) Administration and Support involves providing and managing a digital platform for prime contractors working on NHS England education and training projects. The selected provider will be responsible for uploading content, managing user enrollments, tracking completion rates, and offering ongoing technical support to ensure a functional online learning environment. Key requirements include proficiency in LMS platforms and strict compliance with GDPR and the UK Data Protection Act. The provider is expected to deliver monthly training metric reports to track progress. This opportunity was posted on October 23, 2026, with a response deadline of November 10, 2026.

POSTED

DEADLINE

Technical Support & Service Desk OperationsThis subcontract opportunity with the Government of Ontario Ministry of Transportation focuses on providing technical support and service desk operations for prime contractors on BMS projects. The selected provider will be responsible for managing incident intake and tracking, executing escalation procedures, and overseeing problem, change, and release management processes. All operations must align with OPS service management processes and adhere to specific support coverage hours. Key deliverables include the provision of resolved incident tickets and detailed SLA compliance reports. Interested parties should note that the response deadline is December 4, 2026, and the work is to be performed within Canada under NAICS code 541519.

POSTED

DEADLINE

in about 1 month

Project Management Software SubscriptionThis subcontract agreement provides the City of Bedford Engineering Department with a scalable, cloud-based project management application designed for use by prime contractors. The software includes a comprehensive suite of tools for portfolio management, task tracking, resource allocation, and user administration, featuring Microsoft Entra SSO integration for secure access. Additionally, the platform supports operational efficiency through automated email notifications and the use of customizable logic-based forms. The contract focuses on the delivery of active software licenses and continuous cloud platform access. Identified under NAICS code 541519, the solicitation was posted on October 23, 2026, with a response deadline of November 20, 2026.

City of Bedford

POSTED

DEADLINE

Identity Verification & Security ReportingThis subcontract, titled Identity Verification and Security Reporting, is issued by the Human Capital division of the Department of Homeland Security. The project focuses on implementing employee identity verification and security performance reporting for prime contractors working on TSA projects. The primary objective is to integrate identity verification workflows to ensure that only authorized employees have access to funds, while maintaining strict adherence to federal security standards. The scope of work includes the delivery of a dedicated identity verification module and the creation of security reporting dashboards to track performance. Interested parties should note that the response deadline is November 4, 2026, and the project falls under NAICS code 541519.

POSTED

DEADLINE

Cybersecurity Operations and Compliance MonitoringThe Cybersecurity Operations and Compliance Monitoring subcontract supports prime contractors on HUD Ginnie Mae projects through comprehensive security oversight and risk management. The scope of work includes network vulnerability scanning, patch management, and the administration of HIDS/HIPS, alongside log aggregation and AI risk mitigation. All activities are performed under SOC 2 criteria and must strictly adhere to FIPS 200 and various NIST SP 800 standards, specifically revisions 800-53 rev 5, 800-18, 800-30, and 800-34. Managed by the Department of Housing and Urban Development's GNMA Support Division, the contract requires the delivery of critical compliance documentation, including vulnerability reports and POA&M updates. The place of performance is located in Alexandria, Virginia, under NAICS code 541519. Interested parties must note the response deadline of November 6, 2026.

Cpo : Gnma Support Division

POSTED

DEADLINE

More opportunities from Department Of Homeland Security → Sci Technology Acq Division

Same awarding agency

Help Desk & User Training ServicesThis 8(a) set-aside subcontract, titled Help Desk and User Training Services, supports the Department of Homeland Security's Sci Technology Acq Division. The primary objective is to provide comprehensive end-user support and training for prime contractors working on DHS OIP Web Portal projects. The scope of work includes the delivery of Tier 1 and Tier 2 Help Desk support via ticketing systems and the creation of computer-based training modules utilizing specialized authoring tools. Key deliverables for this engagement consist of resolved support tickets and the completion of all required training materials. The opportunity is categorized under NAICS code 611430. Interested parties should note the response deadline of November 13, 2026.

Professional and Management Development Training

POSTED

DEADLINE

Cybersecurity & Application Security SupportThis 8(a) set-aside subcontract, titled Cybersecurity and Application Security Support, is issued by the Department of Homeland Security's Sci Technology Acq Division under NAICS code 541519. The contract focuses on providing application security compliance and risk management for prime contractors working on DHS OIP Web Portal projects. Key responsibilities include managing cyber supply chain risk, implementing OEM controls, and integrating portals with the DHS active directory. The selected provider will ensure strict adherence to FedRAMP and DHS Security Standards through the use of security scanning tools. Deliverables include the provision of comprehensive security compliance reports and detailed vulnerability remediation logs. The solicitation was posted on October 23, 2026, with a response deadline of November 13, 2026.

Other Computer Related Services

POSTED

DEADLINE

Quality Assurance (QA) & System TestingThis 8(a) set-aside subcontract, managed by the Department of Homeland Security's Sci Technology Acq Division under NAICS code 541519, focuses on providing comprehensive quality assurance and system testing for prime contractors working on DHS OIP Web Portal projects. The scope of work includes executing System Acceptance Testing, developing Requirements Traceability Matrices and Test Case Specifications, and performing both baseline and post-implementation load-testing. The selected provider will be responsible for conducting unit and functional verification checks utilizing automated testing tools to ensure system integrity. Key deliverables for this engagement include detailed test reports and final SAT certification. Interested parties should note the response deadline of November 13, 2026.

Other Computer Related Services

POSTED

DEADLINE

Cloud Operations & Maintenance (O&M)The Cloud Operations and Maintenance subcontract supports prime contractors on Department of Homeland Security OIP Web Portal projects through the Sci Technology Acq Division. The scope of work focuses on technical operations and system maintenance within an AWS Cloud Environment, specifically encompassing system patching at the web and application tiers, production fixes, and the execution of system backups. Additionally, the contractor is responsible for managing GOTS hardware and software license keys while ensuring all activities adhere to FedRAMP and C-SCRM standards. Key deliverables include the provision of system uptime reports and detailed patching logs. This opportunity is designated as an 8(a) set-aside under NAICS code 541513. Interested parties should note the response deadline of November 13, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

Full-Stack Web Portal Development & EnhancementsThis 8(a) set-aside subcontract focuses on full-stack web portal development and enhancements for the Department of Homeland Security's Science and Technology Acquisition Division. The project involves performing technical modifications and functionality upgrades for prime contractors on DHS OIP Web Portal projects, specifically targeting SBIR, SVIP, LRBAA, and BAA programs. Key deliverables include the modernization of UI/UX modules, the creation of responsive web designs for mobile access, the development of multi-phase proposal workflows, and the implementation of custom reporting dashboards. The technical execution utilizes AWS ECS and AWS Lambda to ensure scalable performance, with a strict requirement for Section 508 Compliance across all updated portal source code. This effort falls under NAICS code 541511, emphasizing professional software development and system modernization to improve the overall accessibility and efficiency of the agency's digital infrastructure.

Custom Computer Programming Services

POSTED

DEADLINE

Request for Information: Outreach and Industry Partnerships (OIP) Portal

Solicitation # 70RSAT27RFI000003

The Department of Homeland Security Science and Technology Directorate is issuing Request for Information 70RSAT27RFI000003 to conduct market research for the operation, maintenance, and enhancement of the Outreach and Industry Partnerships OIP web portal. This portal serves as an end-to-end proposal management system for various programs, including Small Business Innovation Research, the Silicon Valley Innovation Program, prize competitions, and Broad Agency Announcements. The scope of work encompasses 15 task areas, including help desk support, user training, and post-award management tools for tracking deliverables and funds. Technical requirements specify experience with Amazon Web Services, specifically AWS Lambda and Amazon Elastic Container Service. This RFI is specifically set-aside for active 8(a) certified businesses under NAICS code 541990. Interested parties must submit a response of no more than 10 pages, using 12-point Times New Roman font, by November 13, 2026. Submissions must include a cover letter detailing the company's legal name, socio-economic category, and whether they intend to compete as a prime or subcontractor. Responses should address 11 specific questions regarding capabilities and experience, including system acceptance testing. This is for planning purposes only and does not constitute a formal solicitation or a binding obligation by the government.

All Other Professional, Scientific, and Technical Services

POSTED

DEADLINE

Recoverable Small Unmanned Aircraft Systems for Frontline Operational Awareness and Surveillance Missions

Solicitation # 70RSAT26RFI000030

The Department of Homeland Security, through the Drone Development Program, is conducting market research via Request for Information 70RSAT26RFI000030 to identify recoverable, reusable, lightweight, and rapidly deployable small unmanned aircraft systems. These multirotor systems are intended to support a wide range of frontline missions, including surveillance, search and rescue, incident response, perimeter security, disaster assessment, maritime awareness, and law enforcement support. DHS is seeking complete kits that include the air vehicle, ground control station, electro-optical or infrared camera payloads, and necessary training and support materials. Key requirements include NDAA compliance and adherence to Blue UAS, Green UAS, or equivalent cybersecurity and supply chain maturity standards. This RFI is for market research purposes only and does not constitute a formal solicitation. However, the government is requesting estimated pricing for quantities ranging from 10 to 50,000 units, noting a target price of approximately 3,000 dollars per kit for high-volume production. Future acquisition strategies may involve a multiple-award IDIQ, catalog-based ordering, or a phased award approach. Interested respondents must submit a cover page, a completed summary table, and a narrative response not exceeding three pages to DHSDPD@hq.dhs.gov by November 5, 2026. Evaluation of potential systems may eventually focus on rapid deployment, video quality, range, endurance, and the ability to scale production.

Aircraft Manufacturing

POSTED

DEADLINE

IT Hardware and Materials SupplierThis subcontract opportunity with the Department of Homeland Security Science and Technology Acquisition Division involves the procurement and delivery of enterprise-grade IT hardware and materials. The supplier will provide servers, workstations, and networking gear essential for network infrastructure maintenance to support prime contractors on OCIO projects. All supplied hardware must be TAA compliant and delivered to designated sites, with performance centered in Reston, Virginia. The contract is designated as a Total Small Business Set-Aside under NAICS code 423430. It was posted on July 7, 2026, and is managed by the Science and Technology Acquisition Division to ensure the necessary technical infrastructure is available for agency operations.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Tier 1 & Tier 2 Help Desk and O&M SupportThis subcontract provides Tier 1 and Tier 2 help desk and operations and maintenance support for prime contractors on Department of Homeland Security Science and Technology OCIO projects. Based in Reston, Virginia, the scope of work includes daily oversight of IT support functions, network infrastructure maintenance, asset management, and patch management, with a requirement for after-hours emergency support. The contractor will utilize ticketing systems and network monitoring tools to deliver resolved support tickets, updated asset inventories, and patched systems. The opportunity is designated as a Total Small Business Set-Aside under NAICS code 541513. Due to the nature of the work with the Science Technology Acquisition Division, all personnel are required to undergo a government background investigation.

Computer Facilities Management Services

POSTED

DEADLINE

Classified Systems and SCIF Support ServicesThis subcontract for Classified Systems and SCIF Support Services provides technical and administrative support for classified IT systems and Sensitive Compartmented Information Facilities (SCIFs) within the Department of Homeland Security Science and Technology Office of the Chief Information Officer. The scope of work includes managing IT infrastructure, providing COMSEC support through federal stakeholder coordination, and utilizing classified hardware to ensure the operational status and compliance of these systems. The opportunity is a Total Small Business Set-Aside under NAICS code 541512, with the place of performance located in Reston, Virginia. Due to the nature of the work, all personnel are required to maintain a Top Secret/SCI clearance to deliver the necessary infrastructure management and security services.

Computer Systems Design Services

POSTED

DEADLINE

Information Technology Support Services (ITSS)

Solicitation # 70RSAT25FC0000007

The U.S. Department of Homeland Security’s Science and Technology Directorate is preparing to extend Task Order 70RSAT25FC0000007 for Information Technology Support Services with Silosmashers, Inc. under the existing Blanket Purchase Agreement, without competition, for a 10-month period from August 1, 2026, through May 31, 2027. This extension is justified under 41 U.S.C. 3304(a)(1) and FAR Subpart 6.103-1 due to the unique and specialized knowledge Silosmashers holds regarding DHS S&T’s IT infrastructure, workflows, and stakeholder expectations. The contractor provides critical services including enterprise architecture alignment with federal standards such as FEAF and TOGAF, information assurance and ISSO support for classified systems and SCIFs, and day-to-day IT operations including help desk, patch management, and asset tracking. A competitive recompete has been delayed due to FY26 funding lapses, and transitioning to a new vendor before completion of the acquisition process would introduce unacceptable risks including security vulnerabilities, noncompliance with mandates, service disruptions, and mission degradation. The incumbent’s established relationships, institutional knowledge, and continuous operational presence are essential to maintaining uninterrupted support for DHS S&T’s mission-critical systems, including SharePoint, ServiceNow, and Microsoft Power Platform. All hardware, networks, enterprise architecture, information assurance, and service delivery functions are covered under this task order, with performance based in Reston, Virginia, and administrative oversight from Washington, D.C. The requirement is classified as a Total Small Business Set-Aside under NAICS code 541512. While no solicitation document exists and this notice is solely for informational purposes, interested parties may submit their capabilities to the Contracting Officer for potential consideration. The government retains full discretion to proceed with the sole-source modification to ensure continuity of mission support, and all inquiries must be directed in writing to Danette Williams at danette.williams@hq.dhs.gov.

Computer Systems Design Services

POSTED

DEADLINE

Instructional Design and Classroom Training DeliveryThe contract entails the development and delivery of classroom instruction and training materials focused on systems engineering for personnel and contractors of the Department of Homeland Security. The work is structured under a subcontract arrangement and falls under the NAICS code 611430, which corresponds to professional and management development training. The instruction must be tailored to meet the specific technical and operational needs of DHS stakeholders, ensuring that training content is both comprehensive and practically applicable within federal systems engineering environments. The performance location is not specified, suggesting potential flexibility in where training may be conducted, possibly across DHS facilities or virtual platforms. All deliverables must align with the mission of the Sci Technology Acquisition Division, requiring subject matter expertise in systems engineering principles and pedagogical skills to effectively translate complex technical concepts into accessible, instructor-led formats. There is no set-aside designation indicated, meaning the opportunity is open to all eligible contractors, and the posting date of June 26, 2026, suggests this is a future solicitation with anticipated activity beginning after that date. The lack of a designated point of contact or physical address implies that further details may be obtained through the provided SAM.gov link, and the subcontract nature indicates the primary contractor will be working under a larger DHS acquisition framework.

Professional and Management Development Training

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS