Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Information Security and Business Continuity Validation

Active

State & Local

Response Deadline10/19/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for the University of Iowa focuses on providing information security and business continuity validation for prime contractors involved in AP automation projects. The selected provider will be responsible for conducting security audits that review encryption standards, identity management, and vulnerability management, while also validating Recovery Time Objectives and Recovery Point Objectives. Expertise in ISO 27001, SOC 1, and SOC 2 frameworks is required to ensure all systems meet necessary security and compliance benchmarks. The primary deliverables for this engagement include comprehensive security audit reports, validated Disaster Recovery Plans, and formal compliance certifications. Interested parties must respond by October 19, 2026, under NAICS code 541690.

General Info

Security and business continuity validation for University of Iowa AP automation projects.

Agency

University Of Iowa

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

IA, USA

Set-Aside

NONE

Documents

This scope was carved out of 18362.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Accounts Payable Automation Services

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedSep 25

subcontract

Response DeadlineOct 19

Submission deadline

Response Deadline

10/19/2026, 09:00:00 PM UTCin 23 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyUniversity Of Iowa

ContactsNo contacts available

OfficeN/A

Organization / AgencyUniversity Of Iowa

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security audits for prime contractors on University of Iowa AP automation projects. Reviews encryption standards, vulnerability management, and identity management; validates Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). Requires expertise in SOC 1, SOC 2, and ISO 27001 frameworks. Delivers security audit reports, validated Disaster Recovery Plans, and compliance certifications.

Similar Contracts

Same NAICS industry code

Village of Pemberton Regional Recreation Strategic Plan

Solicitation # 2026-04

The Village of Pemberton has issued solicitation RFP 2026-04 to secure a qualified consultant team to develop a Regional Recreation Strategy. This multi-jurisdictional project involves the Village of Pemberton, the Squamish-Lillooet Regional District Electoral Area C, and the Līlwat Nation. The primary objective is to establish evidence-based direction for recreation service delivery, capital planning, and inter-jurisdictional collaboration. Key activities include conducting a comprehensive inventory of existing amenities, implementing a community engagement strategy through surveys and open houses, and providing capital and operational recommendations that include Class D cost estimates. The final deliverables consist of a phased Regional Recreation Strategy presented to the respective governing bodies of the three participating jurisdictions. Proposals are due by October 14, 2026, and will be evaluated based on the value of service relative to the total price rather than the lowest bid. Critical evaluation factors include the proponent's experience with similar projects, the strength of their Indigenous engagement methodology, and their capacity to integrate accessibility and inclusion requirements. Selected consultants must provide a detailed budget, a valid Village of Pemberton business license, a WorkSafeBC clearance letter, and professional liability insurance of at least 1,000,000 dollars. Special emphasis is placed on data sovereignty and the protection of Indigenous knowledge shared during the engagement process.

Village of Pemberton

POSTED

about 19 hours ago

DEADLINE

CPTED Design ConsultantThe City of Surrey is seeking a CPTED Design Consultant for a subcontract role to perform security and safety analyses on landscape designs for the SkyTrain project. The consultant will be responsible for reviewing landscape frameworks and design concepts to ensure full compliance with Crime Prevention Through Environmental Design principles, utilizing specific audit tools to deliver comprehensive review reports and design recommendations. Qualified candidates must hold a CPTED Certification to be eligible for this engagement. Interested parties must submit their responses by the deadline of October 19, 2026. This opportunity falls under NAICS code 541690 and is managed through the Province of British Columbia.

POSTED

about 20 hours ago

DEADLINE

Security Assessment and Vulnerability AnalysisThis subcontract opportunity for Security Assessment and Vulnerability Analysis involves performing comprehensive security audits and assessments of state facilities for prime contractors on Commonwealth of Massachusetts projects. The selected provider will evaluate physical and operational security postures to identify vulnerabilities and recommend mitigations using specialized security auditing software. All deliverables must include detailed written security assessment reports and actionable mitigation recommendations. The contract is managed by the OSD03 Category Management office for the state of Massachusetts, with the place of performance located in Boston. Qualified candidates must hold professional certifications in security management, such as CPP or PSP. The response deadline for this opportunity is February 11, 2027, and it falls under NAICS code 541690.

OSD03 - OSD - Category Management

POSTED

about 22 hours ago

DEADLINE

Transportation Data Analysis & Gap AnalysisThis subcontract for Transportation Data Analysis and Gap Analysis involves providing detailed rider-level and trip-level data analysis for prime contractors working on Regional Transportation District projects in Colorado. The primary focus is on analyzing transportation needs for customers with disabilities, identifying high-utilization patterns, and assessing how fare and subsidy adjustments impact ridership. The contractor is responsible for identifying barriers related to fixed-route accessibility and low-income fare discounts. The final deliverable for this engagement is the Needs and Service Gaps Analysis Report. This opportunity falls under NAICS code 541690 and has a response deadline of October 30, 2026.

Outside Consultants

POSTED

DEADLINE

in about 1 month

Specialized Technical Claims InvestigatorThe Specialized Technical Claims Investigator subcontract for the City of Greater Sudbury involves performing high-complexity technical investigations for prime contractors on municipal projects. The scope of work includes forensic analysis of cyber breaches, aviation accidents, and mechanical failures, utilizing telemetry tools and digital forensics to provide cause-of-loss determinations and detailed technical reports. Qualified candidates must hold industry-specific certifications, such as CISSP or aviation safety credentials. This opportunity was posted on September 25, 2026, with a response deadline of October 27, 2026, at 5:30 PM. The contract falls under NAICS code 541690.

City of Greater Sudbury

POSTED

DEADLINE

in about 1 month

NIST 800-53 Compliance & Security CertificationThis subcontract for the South Dakota State Government focuses on providing NIST 800-53 Compliance and Security Certification for prime contractors on BIT projects. The scope of work involves performing security audits and validating hosting environments by mapping facility controls to NIST SP 800-53 Rev. 5 frameworks, reviewing System Security Plans, and conducting vulnerability scans. The selected provider must ensure strict compliance with HIPAA, PCI, and IRS standards using specialized auditing tools to deliver essential compliance certificates, NIST mapping reports, and SOC reports. The opportunity is categorized under NAICS code 541690 and was posted on September 25, 2026, with a response deadline of November 3, 2026. This engagement is designed to secure the technical infrastructure of state projects through rigorous validation and certification processes.

South Dakota State Government

POSTED

DEADLINE

in about 1 month

Cyber Security Management and Virtual CISO (vCISO)This subcontract for the Haralson County Government in Georgia focuses on providing cyber security oversight and strategic security posture management for prime contractors. The selected provider will assign a Virtual CISO who must hold professional certifications such as CISSP or CISM to conduct quarterly security posture reviews and develop comprehensive business continuity plans using specialized security auditing tools. The primary deliverables for this engagement include quarterly security posture review reports and a validated Business Continuity Plan. Interested parties must respond by October 27, 2026, under NAICS code 541690 to ensure the county maintains a secure and resilient operational environment.

Haralson County Government

POSTED

DEADLINE

in about 1 month

Medical CBRN Subject Matter Expertise (SME) & AnalysisThis small business set-aside subcontract, managed by the Department of Defense under the FA8003 771 Enterprise Sourcing Squadron, provides technical and analytical support for Air Force Medical Command projects. The scope of work focuses on Medical CBRN subject matter expertise, including CBRN intelligence research, the preparation of acquisition documentation for materiel solutions, and the execution of workflow analysis for medical CBRN responses. Performance is based in Falls Church, Virginia, and requires the use of SIPRNET for handling classified data. Qualified personnel must possess a Secret clearance and demonstrate familiarity with NIMS, HICS, and HSEEP. Key deliverables for the contract include technical reports, requirements documents, and capability certifications. The opportunity is categorized under NAICS code 541690, with a response deadline of October 9, 2026.

FA8003 771 Enterprise Sourcing Squadron

POSTED

DEADLINE

EWIRDB Production and Authoritative Repository SupportThe EWIRDB Production and Authoritative Repository Support subcontract, issued by the Department of Defense under agency FA8604 Aflcmc Pzi, focuses on providing engineering assessments and quality control for all-source radar and ELINT data repositories. Supporting NASIC and NSIC projects, the contractor is responsible for executing quality control via SERF/JADE and populating the AFMSS/CSDB and MEKS repositories. Additional duties include supporting Technical Coordination Meetings and managing Foreign Military Sales data releases. This requirement necessitates TS/SCI cleared EA Analysts who can strictly adhere to EWIRDB SCG and NSA/CSS guidelines. The primary deliverables consist of quality-controlled signal data and fully populated repositories. The contract falls under NAICS code 541690, with a response deadline of October 9, 2026.

FA8604 Aflcmc Pzi

POSTED

DEADLINE

MC CBRN Request For Information

Solicitation # FA800326R0016

Solicitation FA800326R0016 is a sources-sought request for a performance-based, non-personal advisory and assistance services contract supporting the Air Force Medical Command AFMEDCOM A4/10C programs. The requirement seeks a contractor to provide comprehensive technical and analytical support for Department of the Air Force organizational medical Chemical, Biological, Radiological, and Nuclear CBRN requirements, readiness, and consequence management. This effort is designed to facilitate installation, homeland, and expeditionary medical responses under the Air Force Medical All Hazards Support concept. The contract is designated as a total small business set-aside under NAICS code 541690. The primary place of performance is the Defense Health Headquarters in Falls Church, Virginia, with additional requirements for briefings at the Pentagon and potential travel within the Continental United States and overseas. Key deliverables include meeting agendas, minutes, monthly status and financial reports, and a Quality Control Plan due within ten business days of award. Contractor personnel must possess current Department of War experience in medical CBRN areas and adhere to strict security protocols, including signing non-disclosure agreements and completing annual OPSEC and Controlled Unclassified Information training. The government retains all intellectual property rights for materials produced during the contract.

FA8003 771 Enterprise Sourcing Squadron

POSTED

DEADLINE

MALDI Biotyper Sirius RUO equipment service agreement

Solicitation # 1232SA26Q1529

Solicitation 1232SA26Q1529 is a Request for Quote issued by the USDA ARS for a brand-name-only service agreement to maintain the MALDI Biotyper sirius RUO System located in Ames, Iowa. The contract requires factory-trained engineers to provide one planned preventive maintenance visit per year, which includes a Bruker Preventative Maintenance kit and thorough instrument cleaning, as well as unlimited emergency onsite visits with a five-business-day response time. Additionally, the contractor must provide unlimited remote desktop and phone support with a one-hour callback requirement during normal business hours. The scope of work covers the system hardware, the system library, and the Compass and Data Analysis software. The agreement is structured with a base year and four option years. Award decisions will be based on technical acceptability, delivery, and price, with a specific requirement for a detailed explanation of the quoter's ability to perform the services. Only OEM factory-trained personnel are permitted to perform service procedures. Quotes must be submitted in PDF format to Katelyn Nelson by October 5, 2026, at 12:00 PM CST. All invoices are to be processed electronically through the Invoice Processing Platform.

USDA Ars Afm Apd

POSTED

DEADLINE

Registered Dietitian for Institutional Menu Planning/Review

Solicitation # AK27-107

The Utah Department of Corrections is seeking a qualified Registered Dietitian or consulting firm through a Qualifications-Based Selection process to develop and monitor a comprehensive nutrition program for the Utah State Correctional Facility, Central Utah Correctional Facility, and Community Correctional Centers. The selected contractor will be responsible for the nutritional analysis and development of rotating menus for approximately 21,500 daily meals, ensuring they meet medical, therapeutic, religious, cultural, and allergy-related requirements. The scope is strictly limited to system-wide menu engineering and institutional compliance; individual clinical patient consultations and direct medical care are specifically excluded. The contract is intended for a five-year term, with the highest-ranked vendor negotiating a contract based on fair and reasonable compensation. Applicants must submit a Statement of Qualifications focusing on correctional expertise, technical capability, and experience providing litigation defense or expert witness support. Pricing is strictly prohibited in the initial submission. Selected vendors must comply with strict security and safety standards, including criminal background checks that prohibit any personnel with a felony or multiple misdemeanors from entering facilities. Additionally, contractors must adhere to the Utah Governmental Records Access and Management Act regarding data privacy and certify that they are not engaged in a boycott of the State of Israel. Performance will be monitored via a designated UDC staff member, and the contractor is required to respond to consultation or menu development requests within 48 hours.

POSTED

DEADLINE

More opportunities from University Of Iowa

Same awarding agency

AP Automation and Invoice Management TechnologyThe University of Iowa is seeking a subcontractor to provide a cloud-based SaaS platform for accounts payable automation and invoice management. The selected provider will deliver licensed software featuring OCR and AI-driven data extraction, supplier portals for electronic submissions, and automated routing workflows that integrate directly with the university's ERP systems. To ensure security and compliance, the contractor must maintain SOC 1, SOC 2, and ISO 27001 certifications. This subcontract opportunity falls under NAICS code 513210, with a response deadline of October 19, 2026.

Software Publishers

POSTED

about 23 hours ago

DEADLINE

Accounts Payable Invoice Processing ServicesThis subcontract for Accounts Payable Invoice Processing Services supports the University of Iowa by providing end-to-end operational processing of vendor invoices for prime contractors. The scope of work includes managing invoice intake through various channels such as email, portals, EDI, and paper, followed by indexing, data extraction, validation, coding, and three-way matching against purchase orders. The service provider is responsible for handling exceptions and delivering fully processed, validated, and approved invoices along with the necessary payment files. Qualified candidates must possess specific experience working with Higher Education or Public Sector clients. The contract falls under NAICS code 561110 and is associated with the University of Iowa. Interested parties must submit their responses by the deadline of October 19, 2026.

Office Administrative Services

POSTED

about 23 hours ago

DEADLINE

Accounts Payable Automation Services

Solicitation # 18362

The University of Iowa is conducting a sources sought inquiry to identify qualified service providers capable of delivering outsourced accounts payable invoice processing services and associated technologies. This solicitation, identified by number 18362, aims to gather information from potential vendors to assist the University in its search for automated solutions to manage its financial workflows. The procurement process is focused on finding expertise in streamlining invoice management through specialized software and professional service integration. Interested parties must submit their responses by the deadline of October 19, 2026, at 9:00 PM. The project is centered in Iowa, with the University of Iowa serving as the primary agency. For inquiries regarding this request, prospective providers can contact Chandra Wojno via the provided university contact information. This stage of the process is intended to inform the University's future procurement strategy for accounts payable automation.

Other Accounting Services

POSTED

about 23 hours ago

DEADLINE

Facility Cleaning and Sanitation ServicesThis subcontract for Facility Cleaning and Sanitation Services involves providing deep cleaning and daily sanitation for prime contractors working on University of Iowa retail food service projects. The scope of work includes cleaning floors, sanitizing food preparation surfaces, and removing waste using industrial cleaning agents to ensure the facility is health-code compliant. The contractor must adhere to the OSHA Hazard Communication Standard 29 CFR 1910.1200 and Iowa Administrative Code Chapter 661-22.1. This opportunity falls under NAICS code 561720, with a response deadline of October 14, 2026.

Janitorial Services

POSTED

DEADLINE

Kitchen Equipment Supplier and MaintenanceThe Kitchen Equipment Supplier and Maintenance subcontract is issued by the University of Iowa to provide commercial kitchen equipment and ongoing maintenance for retail food service projects. The scope of work includes the installation and servicing of essential appliances such as ovens, refrigerators, and espresso machines. To ensure safety and quality, all equipment must be commercial-grade and adhere to UL electrical certifications and NSF International standards. The solicitation was posted on September 25, 2026, with a response deadline of October 14, 2026. This opportunity falls under NAICS code 423440 and is designed to ensure that prime contractors have access to functional, professionally maintained kitchen infrastructure across the university's food service facilities.

Other Commercial Equipment Merchant Wholesalers

POSTED

DEADLINE

Food and Beverage Product SupplierThis subcontract agreement establishes a partnership with a food and beverage product supplier to provide raw ingredients, prepared foods, and beverages for prime contractors operating within University of Iowa retail food service projects. The supplier is responsible for delivering regular inventory to the Court Café facility utilizing food-grade transport and storage systems. Compliance is a critical component of the contract, requiring strict adherence to FDA and local health department food safety regulations as well as specific University policies that restrict the supply of sushi. The opportunity was posted on September 25, 2026, with a response deadline of October 14, 2026, under NAICS code 424490.

Other Grocery and Related Products Merchant Wholesalers

POSTED

DEADLINE

Retail Food Service Operator at Boyd Law Building

Solicitation # 18681

The University of Iowa is soliciting proposals for a retail food service operator to manage the Court Café located in the Boyd Law Building. The selected supplier will be responsible for providing breakfast and lunch services to students, faculty, staff, and visitors during the regular academic school year from August through May. Operations are expected to run Monday through Friday, excluding University holidays. The scope of work includes providing all food, supplies, management, and labor necessary for a safe and sanitary operation, as well as daily waste management and cleaning. Notably, the facility lacks built-in fryers, grills, or overhead exhaust systems, and the University requires all fountain beverages to be Coca-Cola products. Additionally, sushi is restricted from the menu per University policy. Proposals must be submitted via the eBid system and should include a detailed food theme, proposed hours of operation, a comprehensive equipment list with estimated costs, a business model, and a transition timeline. The University will also consider value-add opportunities such as profit sharing or financial incentives. The contract is governed by the University of Iowa's Standard Terms and Conditions and a Professional Services Agreement, which mandate strict compliance with insurance requirements, including employer's liability of at least $500,000 per employee and per accident. Contractors must also adhere to various regulatory standards, including OSHA hazard communication, HIPAA, FERPA, and the Fair Packaging and Labeling Act. The University reserves the right to withhold ten percent of payments until final acceptance of services and emphasizes the use of Targeted Small Businesses in accordance with State of Iowa programs.

Limited-Service Restaurants

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS