Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Information System Security Officer (ISSO) and FISMA Lifecycle Support

Open

Federal

Response Deadline11/16/2026, 03:00:00 PM EST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This 8(a) set-aside subcontract for the Department of the Treasury's Bureau of the Fiscal Service seeks an Information System Security Officer (ISSO) to provide FISMA lifecycle support. The selected provider will perform daily security officer functions, including the management of continuous monitoring indicators via Governance, Risk, and Compliance tools. Key responsibilities involve developing Security Controls and Continuity of Operations plans, delivering maintained FISMA documentation, and providing NIST regulatory training. The role requires specialized knowledge of Treasury IT Security Standards and the proper handling of Controlled Unclassified Information. Performance will take place in Parkersburg, West Virginia, under NAICS code 541512. Interested parties must respond by November 16, 2026.

General Info

8(a) subcontract for ISSO FISMA support in Parkersburg, West Virginia, due November 16, 2026.

Agency

Department Of The Treasury → Bureau Of Fiscal Service

NAICS

541512 - Computer Systems Design Services

Place of Performance

Parkersburg, WV, 26101, USA

Set-Aside

8A

Documents

This scope was carved out of SS-FSA-27-005.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Authentication Services for FISMA Support

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 5

subcontract

Response DeadlineNov 16

Submission deadline

Response Deadline

11/16/2026, 03:00:00 PM ESTin 11 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of The Treasury → Bureau Of Fiscal Service

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of The Treasury → Bureau Of Fiscal Service

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs day-to-day security officer functions for prime contractors on Bureau of the Fiscal Service projects. Manages FISMA lifecycle tasks and continuous monitoring indicators using Governance, Risk, and Compliance (GRC) tools. Develops Security Controls and Continuity of Operations (COOP) plans and provides NIST regulatory training. Requires knowledge of Treasury IT Security Standards and CUI handling. Delivers maintained FISMA documentation and COOP plans.

Similar Contracts

Same NAICS industry code

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

about 7 hours ago

DEADLINE

Inventory: All in-one inventory mgmt. software

Solicitation # EV00000992

The Oklahoma Department of Agriculture, Food, and Forestry is soliciting a comprehensive, all-in-one inventory and order management system for the Forest Regeneration Center. The selected supplier will be responsible for reviewing existing seedling inventory and sales systems to implement a tracking system that supports e-commerce, point-of-sale transactions, and automated shipping and pickup fulfillment. A key requirement is the integration of the new system with the center's existing WooCommerce online store. The supplier must also provide a specialist to assist with implementation, data migration, onboarding, and live support. Bidders must submit a firm, fixed price for the contract term via the Oklahoma Supplier Portal by November 26, 2026. Proposals will be evaluated based on the ability to meet specifications, the number of requested exceptions to state terms—which should not exceed 10%—and the provision of required Authorization to Operate (ATO) documentation. Required bid components include a cover page, company information, pricing, and various certifications, including non-collusion and insurance certificates from carriers with an A.M. Best rating of A- or better. Payment for services is set at net 45 days following customer acceptance of deliverables at the destination.

Oklahoma Department of Agriculture

POSTED

about 9 hours ago

DEADLINE

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and the Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern Laboratory Information Management Services platform for the Jody Connor Limnology Center. This new system must document, track, and retain physical, chemical, and biological water quality data throughout standard laboratory procedures, including sample receipt, analysis, and quality control. A critical requirement is the implementation of a two-way connection and synchronization with the Oracle-based Environmental Monitoring Database to ensure the automated flow of completed records. The solution must be an industry-standard LIMS or similar technological approach, compatible with Zebra ZD220 TTLabel printers, and capable of managing complex sample preservation and container requirements. This Firm Fixed Price solicitation, identified as RFP 2026-093, requires strict adherence to cybersecurity standards, including NIST SP 800-171, 800-53 Moderate level controls, and 800-63. Vendors are evaluated on a weighted scoring system totaling 110 points, with significant emphasis on technical solutions, staffing qualifications, and GovRAMP or FedRAMP authorization status. The project includes deliverables such as a detailed work plan, data conversion, system installation, and staff training, with a production go-live goal for early 2028. Proposals must be submitted electronically in searchable PDF format, with price and technical volumes separated to ensure a blind technical review.

Department Of Environmental Services

POSTED

about 11 hours ago

DEADLINE

Parking Enforcement Systems IntegrationThe Parking Enforcement Systems Integration subcontract involves providing technical integration services for prime contractors working on City of Surrey projects in Canada. The primary objective is to connect mobile payment applications with existing parking enforcement systems through the development of APIs and data bridges, ensuring that payment statuses are synchronized in real time for enforcement officers. The scope of work includes the execution of comprehensive test plans to verify data accuracy and the resolution of any integration defects. The successful contractor is responsible for delivering fully tested integrations along with a final test results report. This opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026.

POSTED

about 11 hours ago

DEADLINE

Parking Mobile Payment App

Solicitation # 1220-030-2026-056

The City of Surrey is soliciting proposals for a Parking Mobile Payment App to maintain continuity of its current services while integrating new innovations and value-added capabilities. The scope of work includes the provision of software, configuration, integration, training, and ongoing support. Key deliverables include a detailed implementation and transition plan. The solution must adhere to strict security and privacy standards, specifically the Payment Card Industry Data Security Standard (PCI DSS) and British Columbia privacy legislation, including a mandatory Privacy Impact Assessment. Proposals will be evaluated based on the proponent's experience, reputation, resources, technical capabilities, and financial proposals, with the City reserving the right to select the most advantageous offer rather than the lowest price. Financial proposals must cover three specific transaction fee scenarios: contractor exclusivity, non-exclusivity, and end-user payment of fees. The contract includes a term that can be extended for up to four additional one-year periods. Payment terms require parking fees to be remitted by the 15th day of the following month, and the City maintains the right to terminate or reduce services if funds are not appropriated for the current fiscal year. Contractors must maintain Workers Compensation Board coverage and a safety program meeting occupational health and safety requirements. The City also retains the right to inspect personal information and management policies at the contractor's premises. Proposals must be submitted as a single PDF file to the procurement office by the deadline.

POSTED

about 11 hours ago

DEADLINE

EdTech Integration for World Language MaterialsThis subcontract for EdTech Integration for World Language Materials involves providing and configuring digital infrastructure for prime contractors supporting Atlanta Public Schools. The scope of work focuses on integrating digital textbooks and language learning software into the district learning management system, configuring single sign-on accounts, and ensuring all systems are interoperable with district hardware. All technical implementations must strictly adhere to FERPA and COPPA standards to ensure student data privacy and security. The project is categorized under NAICS code 541512 and aims to deliver a fully integrated digital learning environment for K-12 World Language projects. Interested parties should note that the solicitation was posted on November 5, 2026, with a response deadline of December 7, 2026.

Atlanta Public Schools

POSTED

about 12 hours ago

DEADLINE

in about 1 month

Independent Cybersecurity AssessmentThis subcontract for Independent Cybersecurity Assessment involves performing security testing and risk assessments for prime contractors working on Texas Education Agency projects. The scope of work focuses on conducting penetration testing for data submission tools and public portals to ensure the protection of confidential information. The selected provider must possess a strong understanding of state security standards and TGC 2063 to ensure full compliance. The primary deliverables for this engagement include a Risk Assessment Report and a Penetration Test Executive Summary. Interested parties should note that the response deadline is December 8, 2026. This opportunity falls under NAICS code 541512 and is managed through the Texas state procurement system.

Texas Education Agency

POSTED

about 13 hours ago

DEADLINE

in about 1 month

Bond Transparency Database

Solicitation # 701-26-015

The Texas Education Agency (TEA) is soliciting responses for the design, development, implementation, and operation of a statewide Bond Transparency Database. This system is required by Texas Education Code §45.114 to collect, validate, and publicly display information regarding school district and open-enrollment charter school bonds, maintenance taxes, capital projects, and related elections. The solution must be interoperable with other state financial reporting systems and include a public portal for approximately 1,208 Local Education Agencies, featuring geographic and historical filters for data retrieval. The project must adhere to all state security, accessibility, and hosting standards, including TX-RAMP certification. The contract will be awarded based on a best value approach, with disqualification for vendors with a D or F score in the Vendor Performance Tracking System. Respondents must submit a technical proposal of no more than four pages, using 12-point type and avoiding bullet points, images, or footnotes. A detailed Task, Activity, Deliverable, and Budget Plan (TADBP) is required for consideration. Deliverables are subject to a strict quality threshold where ten or more production bugs may result in non-payment. The contractor must also ensure all personnel complete TEA-approved cybersecurity training and comply with various non-discrimination and safety laws, including the Americans With Disabilities Act and the Federal Occupational Safety and Health Act.

Texas Education Agency

POSTED

about 13 hours ago

DEADLINE

in about 1 month

CMMC Level 2 Compliance & Data Handling SupportThis subcontract, titled CMMC Level 2 Compliance and Data Handling Support, is issued by the Department of Defense under the DLA Weapons Support Fluid Handling Division. The project focuses on performing cybersecurity assessments for prime contractors involved in DLA aerospace projects, specifically ensuring that systems meet NIST SP 800-171 standards for the secure transmission of defense procurement data. The primary objective is to implement data protection controls for Covered Defense Information in accordance with RD002 and to conduct CMMC Level 2 self-assessments per RD004. The selected provider will be responsible for delivering a secure data handling plan and a completed CMMC Level 2 self-assessment. The work is designated under NAICS code 541512 and will be performed at Hill AFB. The solicitation was posted on November 5, 2026, with a response deadline of November 16, 2026.

DLA WEAPONS SUPPORT FLUID HANDLING DIVISION

POSTED

about 13 hours ago

DEADLINE

Installation, Configuration, and Testing ServicesThis subcontract for Installation, Configuration, and Testing Services involves the physical installation, technical configuration, and operational testing of scanning systems for prime contractors on Government of Ontario projects. The scope of work includes the integration of hardware and software to deliver a fully operational scanning system, ensuring all components are properly tested and functional. The project is managed by the Public and Business Service Delivery and Procurement agency in Canada. Contractors must strictly adhere to health and safety regulations, specifically OHSA R.S.O. 1990, c.0.1, and complete mandatory health and safety awareness training as required by O. Reg. 297/13. Responses to this solicitation are due by November 23, 2026.

Public and Business Service Delivery and Procurement

POSTED

about 14 hours ago

DEADLINE

Digitization Software Licensing & ImplementationThis subcontract, titled Digitization Software Licensing and Implementation, involves the provision and configuration of image processing and digitization workflow management software. The project is designed for prime contractors working on government ministry archival projects for the Government of Ontario. The scope of work includes the delivery of an installed and licensed software system featuring batch processing tools, workflow automation, quality control capabilities, and metadata functionality. The opportunity was posted on November 5, 2026, with a response deadline of November 23, 2026. Classified under NAICS code 541512, the contract is managed by the Public and Business Service Delivery and Procurement agency, with the place of performance located in Canada.

Public and Business Service Delivery and Procurement

POSTED

about 14 hours ago

DEADLINE

System Testing and Quality Assurance (QA)This subcontract opportunity, titled System Testing and Quality Assurance (QA), is issued by the New Jersey Division of Purchase and Property. The selected contractor will be responsible for performing independent testing of configured solutions for prime contractors, which includes developing comprehensive test plans and User Acceptance Testing strategies. Key technical duties involve executing functional, integration, and performance testing while maintaining a Requirements Traceability Matrix to ensure all project specifications are met. Final deliverables for the engagement include a formal Test Plan, a detailed Test Report, and official UAT sign-off. The procurement is designated as an SBA set-aside specifically for Small Business Enterprises and Disabled Veteran-Owned Businesses under NAICS code 541512. Interested parties must submit their responses by the deadline of February 4, 2027. This project focuses on ensuring the quality and reliability of systems implemented within the state's infrastructure through rigorous quality assurance protocols.

Division of Purchase and Property

POSTED

about 15 hours ago

DEADLINE

More opportunities from Department Of The Treasury → Bureau Of Fiscal Service

Same awarding agency

Identity, Credentialing, and Access Management (ICAM) Technical OperationsThis 8(a) set-aside subcontract for the Department of the Treasury's Bureau of the Fiscal Service focuses on Identity, Credentialing, and Access Management (ICAM) Technical Operations. The selected provider will deliver operational administration and help desk support for prime contractors, specifically managing PKI, LDAP, SSO, Splunk Vault, and CAIA services. Key technical responsibilities include the integration of SailPoint Identity IQ and Enterprise User Access software, as well as the development of comprehensive ICAM process documentation and the resolution of support tickets. Performance for this contract will take place in Parkersburg, West Virginia, under NAICS code 541519. Personnel assigned to this project are required to hold technical certifications in either Identity Management or SailPoint to ensure the effective delivery of operational ICAM services. Interested parties should note the response deadline of November 16, 2026.

Other Computer Related Services

POSTED

about 18 hours ago

DEADLINE

IT Audit Liaison and Regulatory Compliance SupportThe IT Audit Liaison and Regulatory Compliance Support subcontract is a Department of the Treasury opportunity for the Bureau of the Fiscal Service, specifically set aside for 8(a) certified firms under NAICS code 541611. The project is based in Parkersburg, West Virginia, and requires a technical point of contact to manage interactions with external auditors, specifically for OIG and GAO assessments. Key focus areas include the Consolidated Financial Statements and the Schedule of Federal Debt. The selected contractor will be responsible for performing audit liaison activities, delivering comprehensive audit response packages, and providing necessary remediation evidence to close outstanding findings. Candidates must possess demonstrated experience with GAO and OIG audit processes to ensure regulatory compliance and successful remediation management for the prime contractor.

Administrative Management and General Management Consulting Services

POSTED

about 18 hours ago

DEADLINE

Vulnerability Assessment and POAM ManagementThe Vulnerability Assessment and POAM Management subcontract is a Department of the Treasury project for the Bureau of the Fiscal Service, designated as an 8(a) set-aside under NAICS code 541519. The work is centered in Parkersburg, West Virginia, with a response deadline of November 16, 2026. The scope of work involves analyzing vulnerability scan results for prime contractors to provide guidance on closing security issues. Key responsibilities include developing Plan of Action and Milestones documentation, establishing remediation schedules and cost estimates, and performing root cause analysis. The contractor is required to verify closure evidence within GRC tools and deliver completed POAMs and verified remediation documentation.

Other Computer Related Services

POSTED

about 18 hours ago

DEADLINE

Authentication Services for FISMA Support

Solicitation # SS-FSA-27-005

The Bureau of the Fiscal Service, under the Department of the Treasury, is issuing a Sources Sought Notice (SS-FSA-27-005) to identify 8(a) certified contractors capable of providing commercial engineer and project management services. The primary objective is to secure highly skilled technical support for Information System Security Officer (ISSO) duties and audit liaison services for the Authentication Services General Support System (AS GSS). The scope of work includes the development, maintenance, and oversight of the Authentication Services FISMA system, management of security controls and Continuity of Operations plans, and the administration of Identity, Credentialing, and Access Management (ICAM) functions. Key responsibilities involve managing FISMA lifecycle tasks within the Governance, Risk, and Compliance (GRC) tool, providing guidance on vulnerability scanning, and acting as a liaison for audits conducted by the OIG and GAO. The anticipated period of performance runs from February 5, 2027, to November 4, 2031, with services performed primarily via telework, supplemented by on-site support at designated Bureau of the Fiscal Service facilities. Contractors must adhere to NIST, Treasury, and Fiscal Service IT security standards, and ensure all sensitive deliverables are marked as Controlled Unclassified Information (CUI). Interested 8(a) sources must submit their company identification, socioeconomic status, and available contracting vehicles or price lists by November 16, 2026. This notice is for acquisition planning purposes only and is not a formal request for proposal.

Other Computer Related Services

POSTED

about 18 hours ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS