Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Information Security & Cybersecurity Compliance

Active

Federal

Response Deadline09/02/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract titled Information Security & Cybersecurity Compliance seeks a subcontractor to implement and sustain critical cybersecurity controls including multifactor authentication, system access logging, and adherence to federal IT security standards. The work is intended to strengthen the security posture of the Department of Energy’s SC Oak Ridge Support Center by ensuring compliance with established federal requirements for information technology systems. The subcontract is categorized under NAICS code 541512 and is designated as an 8A set aside, meaning it is reserved for small disadvantaged businesses. The solicitation was posted on August 3, 2026, with a response deadline of September 2, 2026, at 9:00 PM Eastern Time. Performance will be conducted in support of the Department of Energy’s operations, although specific location details for place of performance are not provided. The contract does not include a solicitation number or point of contact information, and all submissions must be made through the FedConnect portal using the provided UI link. Contractors must be prepared to demonstrate proven capability in deploying and maintaining federal-compliant cybersecurity measures across complex IT environments.

General Info

8A set-aside subcontract for cybersecurity compliance with federal standards at DOE Oak Ridge Support Center.

Agency

Department Of Energy → SC Oak Ridge Support CenterView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Not specified

Set-Aside

8A

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 3

subcontract

Response DeadlineSep 2

Submission deadline

Response Deadline

09/02/2026, 09:00:00 PM UTCin 24 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Energy → SC Oak Ridge Support Center

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Energy → SC Oak Ridge Support Center

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implement and maintain cybersecurity controls such as multifactor authentication, system access logging, and compliance with federal IT security standards.

Similar Contracts

Same NAICS industry code

Cybersecurity and CMMC Compliance Support

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information within contractor systems that handle classified or sensitive contract data. This effort is mandatory for ensuring compliance with federal cybersecurity standards applicable to defense contractors and involves a full assessment and record-keeping of all required security controls across systems processing protected information. The work must be completed in alignment with the NIST framework and demonstrated through formal documentation to meet contractual obligations. The contract is classified as a subcontract under the NAICS code 541512, associated with computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense with performance required in Tracy, California, 95304-5000. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a tight turnaround for submission. Although no set-aside type is specified, the contract is governed by DoD cybersecurity regulations and demands strict adherence to NIST guidelines to protect national defense information, making compliance non-negotiable for award consideration.

ASC COMMODITIES DIVISION

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance & NIST 800-171 AssessmentThe contract requires the performance of NIST SP 800-171 cybersecurity assessments to ensure systems handling Covered Defense Information meet federal security requirements. The effort focuses on evaluating compliance with the specified framework, identifying gaps, and implementing necessary safeguards to protect sensitive data. All assessment outcomes must be documented and submitted through the Supplier Performance Risk System to validate adherence to contractual and regulatory obligations. The work is tied to a subcontract under the Department of Defense and is to be performed at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026, under the NAICS code 541512, indicating it pertains to computer systems design services. There is no set-aside designation specified, and the contract does not include a designated point of contact within the provided details.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance and Reporting (Subcontractor Support)This contract requires subcontractor support to ensure compliance with NIST SP 800-171 standards for protecting covered defense information, while also mandating timely reporting of any cyber incidents in accordance with DFARS 252.204-7012. The work involves implementing and maintaining security controls aligned with federal cybersecurity requirements to safeguard sensitive data handled by the subcontractor on behalf of the Department of Defense. Performance is expected to be conducted at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response submission set for August 17, 2026. The solicitation falls under NAICS code 541512, indicating it is focused on computer systems design services, and is issued under the ASC SUPPLIER OPER OEM DIVISION, with no set-aside classification specified. The subcontractor must be prepared to demonstrate robust cybersecurity practices and incident response capabilities to meet defense contractual obligations.

ASC SUPPLIER OPER OEM DIVISION

POSTED

about 8 hours ago

DEADLINE

Cybersecurity and CMMC Assessment SupportThe contract seeks to provide specialized support to a prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, specifically focused on the safeguarding of Controlled Unclassified Information (CUI). The effort involves assisting the prime contractor with implementing required security controls, conducting gap assessments, preparing documentation, and ensuring adherence to CMMC framework standards to meet Department of Defense cybersecurity requirements. The work is aligned with NAICS code 541512, indicating it falls under computer systems design and related services, and is structured as a subcontract to support broader defense contracting obligations. This subcontract is tied to performance at Hill Air Force Base with ZIP code 84056-5734 and was posted on August 9, 2026, with a response deadline of August 17, 2026. The acquiring agency is the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is part of a broader defense supply chain modernization and cybersecurity enhancement initiative. The subcontractor must possess demonstrated expertise in CMMC Level 2 implementation, knowledge of NIST SP 800-171 controls, and experience working within defense contracting environments to ensure the prime contractor meets all assessment and certification prerequisites within the established timeline.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 8 hours ago

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

LAND SUPPLY CHAIN

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

JACKSONVILLE BLDG

POSTED

about 8 hours ago

DEADLINE

Cybersecurity for Covered Defense Information (CDI)

MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

about 8 hours ago

DEADLINE

CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.

ACTIVE DEVICES DIVISION

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance for Controlled Unclassified Information

ACTIVE DEVICES DIVISION

POSTED

about 8 hours ago

DEADLINE

More opportunities from Department Of Energy → SC Oak Ridge Support Center

Same awarding agency

Organizational Conflict of Interest (OCI) ManagementThis contract requires the identification, disclosure, and mitigation of organizational conflicts of interest in strict adherence to Federal Acquisition Regulation 9.5 and additional Department of Energy-specific guidelines. The subcontractor must implement a robust OCI management framework to ensure impartiality and avoid any real or perceived bias that could compromise the integrity of DOE operations or decision-making processes. All potential conflicts must be proactively assessed and addressed through documented mitigation strategies, with full transparency and compliance throughout the engagement. The contract is classified as an 8A small business set-aside under NAICS code 541611, indicating it is reserved for small businesses engaged in administrative management and general management consulting services. It is issued by the SC Oak Ridge Support Center under the Department of Energy and has a submission deadline of September 2, 2026. Performance is expected to support DOE activities, though specific location details are not provided. Compliance with all OCI requirements is mandatory for award consideration, and failure to adequately address conflicts may result in disqualification or contract termination.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Key Personnel Recruitment & Retention ServicesThis contract seeks Qualified vendors to provide recruitment and retention services for highly skilled personnel essential to critical roles requiring Department of Energy approval and eligibility for Q-level security clearance. The effort focuses on securing long-term assignments for individuals with the necessary expertise, clearance potential, and commitment to support mission-critical functions within the DOE ecosystem. The subcontract is designated under the 8A small business set-aside program, indicating priority for socioeconomically disadvantaged businesses, and falls under NAICS code 541690 for other scientific and technical consulting services. The solicitation is open for responses until September 2, 2026, and is managed by the SC Oak Ridge Support Center under the Department of Energy. While specific locations of performance are not detailed, the nature of the work implies operations tied to DOE facilities requiring stringent security protocols. Vendors must demonstrate proven capability in identifying, vetting, and retaining talent for high-security government roles, with an emphasis on sustained personnel deployment under Q-clearance eligibility requirements. There is no listed point of contact or physical address, and all information is accessible through the official FedConnect portal.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Workplace Substance Abuse Program (WSAP) ServicesThe contract titled Workplace Substance Abuse Program Services requires the provision of comprehensive drug testing, medical consultations, and Health Risk Profile examinations for personnel under the jurisdiction of the Department of Energy's SC Oak Ridge Support Center. All services must strictly comply with Department of Energy health and workplace safety regulations to ensure a safe and drug-free work environment. The scope encompasses ongoing support for workplace substance abuse prevention, with deliverables aligned to federal standards governing employee health monitoring and hazardous exposure management. This is a subcontract under the 8A set-aside program, indicating it is reserved for small disadvantaged businesses. The NAICS code 621399 identifies the nature of services as other miscellaneous ambulatory health care services. The solicitation was posted on August 3, 2026, with a firm deadline of September 2, 2026, for responses. Performance location is tied to the DOE’s SC Oak Ridge Support Center, though specific geographic details are not provided. Interested parties must respond through the FedConnect portal prior to the deadline to be considered for award.

Offices of All Other Miscellaneous Health Practitioners

POSTED

DEADLINE

Industrial Security (Facility Clearance) SupportThe contract seeks a subcontractor to deliver comprehensive physical and technical security support for classified facilities under the oversight of the Department of Energy’s Oak Ridge Support Center. Scope of work includes managing access control systems, safeguarding classified information and assets, and ensuring full compliance with Department of Energy facility clearance requirements. The services are essential to maintaining the integrity and security of sensitive operations and must align with federal standards for handling classified material within secure environments. The subcontract is designated as an 8A set-aside, indicating it is reserved for small businesses owned and controlled by socially and economically disadvantaged individuals, and is classified under NAICS code 561612 for security services. Responses are due by September 2, 2026, and the work is expected to be performed at DOE-controlled facility locations, though exact locations are not specified. The solicitation was posted on August 3, 2026, and no point of contact information is provided in the public data.

Security Guards and Patrol Services

POSTED

DEADLINE

Personnel Security Program ManagementThe contract titled Personnel Security Program Management requires the administration of personnel security clearances, background investigations, and adjudications in alignment with Department of Energy security directives, including HSPD-12 and DOE-C-2002. The work involves ensuring full compliance with federal and agency-specific security standards to safeguard sensitive information and facilities, focusing on the integrity and reliability of personnel granted access to DOE assets. The contractor must manage end-to-end security processes, from initial application through final adjudication, and maintain rigorous documentation and reporting protocols to meet regulatory requirements. This is a subcontract classified under NAICS code 541611 with an 8A set-aside designation, intended for small disadvantaged businesses. It was posted on August 3, 2026, with a response deadline of September 2, 2026, and is managed by the SC Oak Ridge Support Center under the Department of Energy. The place of performance and point of contact details are not specified, indicating flexibility in location or pending further allocation. The contract is accessible via the FedConnect portal and is part of the DOE’s broader effort to secure its workforce through standardized, compliant personnel security practices.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Technical Services Support

Solicitation # 89243126RSC000172

The Department of Energy’s Office of Science is seeking a single contractor to deliver comprehensive security support services at the Oak Ridge, Tennessee facility, serving the Office of Safety and Security, the Office of Science Consolidated Service Center, and the Oak Ridge Office of Environmental Management. The contractor will be responsible for a full suite of site-wide security functions aimed at safeguarding critical national security assets within a secure operational environment, ensuring compliance with stringent safeguarding protocols. Work is exclusively performed on-site in Oak Ridge, Tennessee, with no remote or alternative locations permitted. The solicitation, identified as 89243126RSC000172 and posted on August 3, 2026, has a firm response deadline of September 2, 2026. It is classified under NAICS code 541690 and is set aside under the 8A program, indicating it is reserved for small disadvantaged businesses. The contracting officer for this effort is James McDaniel Jr., reachable via email at jim.mcdaniel@science.doe.gov. Contractors must be prepared to support a high-security federal mission requiring specialized expertise in physical security, access control, threat assessment, and emergency response within a federally controlled facility.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE