Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

IRS 1075 and VITA Security Compliance

Active

State & Local

Response Deadline11/06/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The IRS 1075 and VITA Security Compliance subcontract involves performing critical security assessments for prime contractors working on Virginia Information Technologies Agency projects within the Commonwealth of Virginia. The primary objective is to audit systems for IRS Publication 1075 compliance, with a specific focus on validating access controls and data encryption for Social Security numbers. Additionally, the scope includes managing non-disclosure agreements and personnel background checks to ensure rigorous security standards are maintained. To execute these requirements, the contractor will utilize specialized security scanning and auditing software to produce comprehensive compliance reports, audit logs, and security certifications. This opportunity, categorized under NAICS code 541690, was posted on October 5, 2026, with a response deadline of November 6, 2026.

General Info

Subcontract for IRS 1075 security assessments and VITA compliance audits in Virginia.

Agency

Virginia → VITA eVA Statewide

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Commonwealth of Virginia, VA, USA

Set-Aside

NONE

Documents

This scope was carved out of RFP 2025-05.

The full solicitation package (21 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Outdoor Recreational License Sales and Customer Engagement Solution

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 5

subcontract

Response DeadlineNov 6

Submission deadline

Response Deadline

11/06/2026, 07:00:00 PM UTCin 21 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyVirginia → VITA eVA Statewide

ContactsNo contacts available

OfficeN/A

Organization / AgencyVirginia → VITA eVA Statewide

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security assessments for prime contractors on Virginia Information Technologies Agency (VITA) projects. Audits systems for IRS Publication 1075 compliance, validates data encryption and access controls for SSNs, and manages personnel background checks and NDAs. Uses security scanning and auditing software. Delivers compliance reports, security certifications, and audit logs.

Similar Contracts

Same NAICS industry code

Lightning Data Analysis & InterpretationThis subcontract, titled Lightning Data Analysis and Interpretation, involves providing expert analysis and interpretation of complex lightning data sets for prime contractors supporting the NASA Shared Services Center. The scope of work focuses specifically on the Orion Lightning Instrumentation and Monitoring Systems, the Mobile Launcher, and Launch Complex 39B. The selected provider will be responsible for delivering detailed technical summaries and data analysis reports to ensure operational safety and system integrity. The project is categorized under NAICS code 541690 and will be performed in Orlando, Florida. Interested parties should note the tight response window, with the opportunity posted on October 16, 2026, and a response deadline of October 20, 2026.

NASA Shared Services Center

POSTED

about 10 hours ago

DEADLINE

Security Due Diligence and Compliance AuditorThis subcontract opportunity is for a Security Due Diligence and Compliance Auditor to perform independent security assessments for prime contractors working on digital evidence projects for the Iowa Department of Public Safety. The selected provider will be responsible for conducting security due diligence, validating hashing practices to ensure court admissibility, and testing the immutability of audit trails. Additionally, the scope of work includes performing vulnerability assessments and penetration testing specifically targeting intake portals. Qualified candidates must hold CISSP or CISA certifications to ensure the technical rigor of the assessments. The primary deliverables for this engagement are comprehensive security assessment reports and formal compliance certifications. Interested parties should note that the response deadline for this requirement is November 19, 2026.

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Occupational Health and Safety (OHS) Policy DevelopmentThis subcontract for Occupational Health and Safety Policy Development supports prime contractors working on San Diego County Water Authority projects. The selected provider will be responsible for developing and reviewing safety programs and policies, which includes conducting site visits to draft and update safety manuals and standard operating procedures. Key focus areas include Confined Space Entry, Lockout/Tagout, Fall Protection, and Job Hazard Analysis, all of which must comply with Cal/OSHA and OSHA regulations. The scope of work culminates in the delivery of comprehensive written safety programs, policy manuals, and documentation for audit responses. This opportunity is based in San Diego, California, under NAICS code 541690. Interested parties must submit their responses by the deadline of November 13, 2026.

San Diego County Water Authority

POSTED

about 15 hours ago

DEADLINE

As-Needed Safety Consulting Services

Solicitation # 20261015043

The San Diego County Water Authority is soliciting proposals for as-needed safety consulting services to support its Risk and Safety Division in addressing findings from a September 2023 comprehensive audit. The selected consultant will provide expertise in occupational safety and health compliance, specifically focusing on industrial hygiene services under a Certified Industrial Hygienist and the development and review of safety programs such as Chromium, Confined Space Entry, Electrical Safety, and Fall Protection. The contract is designed for a two-year term with a not-to-exceed value of $90,000, and the Water Authority maintains a sole option to extend the agreement for one additional year. The anticipated notice to proceed is scheduled for the week of January 18, 2027. Proposals are due by November 13, 2026, via BidNet and will be evaluated by a Selection Panel using a weighted scoring system: Technical Competence (30%), Organization and Schedule (20%), Past Performance (10%), Cost Proposal (10%), and Subcontractors (5%). Awarded contractors must adhere to strict insurance requirements, including $4,000,000 in general aggregate liability and $1,000,000 in automobile and workers compensation limits. Additionally, the contractor must comply with the Small Contractor Outreach and Opportunities Program (SCOOP) and obtain explicit approval for any use of artificial intelligence. Payments are processed monthly within 30 days of receipt, and all work products remain the property of the Water Authority.

San Diego County Water Authority

POSTED

about 15 hours ago

DEADLINE

International Emergency Response & Crisis ManagementThis subcontract for Arizona State University focuses on providing comprehensive international emergency response and crisis management services. The selected provider will operate a 24/7/365 Security Operations Center to manage crisis escalation paths and coordinate critical actions, including emergency evacuations and medical extractions, for prime contractors involved in the university's international activities. The contract requires the establishment of rigorous emergency response protocols to ensure constant availability and effective crisis resolution. Interested parties must submit their responses by December 14, 2026, under NAICS code 541690.

Arizona State University

POSTED

about 23 hours ago

DEADLINE

in about 2 months

Global Intelligence & Risk AnalysisThe Global Intelligence and Risk Analysis subcontract, issued by Arizona State University, seeks a provider to deliver real-time intelligence, threat monitoring, and risk assessments for prime contractors involved in the university's international programs. The selected vendor will be responsible for monitoring geopolitical stability, issuing region-by-region risk declarations, and providing emerging threat alerts through the use of specialized intelligence monitoring software. To qualify for this engagement, contractors must demonstrate proven regional operational experience and possess specific language capabilities. The primary deliverables include comprehensive intelligence reports and detailed risk assessments. Interested parties must submit their responses by December 14, 2026, under NAICS code 541690.

Arizona State University

POSTED

about 23 hours ago

DEADLINE

in about 2 months

AODA Accessibility Auditor/ConsultantThe Town of Whitby is seeking an AODA Accessibility Auditor/Consultant for a subcontracting role to review and remediate final reports and digital deliverables for prime contractors. The primary objective is to audit PDF and digital files to ensure they meet the Town's accessible document guidelines and AODA compliance standards using specialized PDF accessibility checkers. Key deliverables for this engagement include the production of AODA-compliant final versions of the ITMP and ATP. Qualified candidates must hold certification in Web Content Accessibility Guidelines (WCAG) or AODA compliance. This opportunity was posted on October 15, 2026, with a response deadline of November 12, 2026. The contract falls under NAICS code 541690, focusing on professional consulting services to ensure municipal project deliverables are fully accessible.

POSTED

DEADLINE

Cybersecurity Risk Assessment and Compliance ConsultingThis subcontract for Cybersecurity Risk Assessment and Compliance Consulting involves providing security audits and vulnerability assessments for prime contractors supporting Neshoba County Board of Supervisors projects. The scope of work includes conducting penetration testing and vulnerability scans using Nessus or Qualys scanners, as well as the development of comprehensive cybersecurity policies. The selected provider must ensure all activities adhere to NIST CSF and CJIS compliance standards. Key deliverables for the engagement include the production of detailed Risk Assessment Reports and Vulnerability Remediation Plans. The solicitation was posted on October 15, 2026, with a response deadline of October 28, 2026, under NAICS code 541690.

POSTED

DEADLINE

Cybersecurity and Export Compliance ConsultingThis subcontract opportunity, titled Cybersecurity and Export Compliance Consulting, supports prime contractors working on DLA Weapons Support projects for the Department of Defense. The scope of work focuses on ensuring regulatory adherence through the preparation of firms for CMMC Level 2 Third-Party Assessments, the establishment of ITAR and EAR export control protocols, and the management of US/Canada Joint Certification Program certifications. Key deliverables include the creation of comprehensive security plans and detailed audit readiness reports. The project is associated with NAICS code 541690 and will be performed in Tracy, California. Interested parties should note that the solicitation was posted on October 15, 2026, with a response deadline set for October 26, 2026. The contracting agency is DLA DIST SAN JOAQUIN.

DLA DIST SAN JOAQUIN

POSTED

DEADLINE

Privacy Impact Assessment (PIA) ConsultantThe Town of Oakville is seeking a Privacy Impact Assessment Consultant for a subcontracting role to support prime contractors on municipal projects. The selected consultant will be responsible for conducting detailed assessments of business processes and system integrations, mapping information flows, and identifying the necessary legal authority under FIPPA and MFIPPA. All work must be performed in alignment with the CSA Model Code and the Ten Fair Information Principles. Key deliverables for this engagement include the production of draft and final Privacy Impact Assessment reports, as well as formal presentations delivered to Town leadership. Interested parties should note that the response deadline for this opportunity is November 3, 2026.

Town of Oakville

POSTED

DEADLINE

Social Engineering and Physical Security AssessmentThe Social Engineering and Physical Security Assessment is a subcontract opportunity for Philadelphia Gas Works security projects. The selected contractor will be responsible for performing simulated attacks on human behavior and physical access controls to identify vulnerabilities. This includes executing social engineering simulations to exploit user behaviors and attempting unauthorized physical access to sensitive information and computing hardware. The contractor must provide a detailed written report documenting all findings and the specific methods used to bypass security measures. This opportunity was posted on October 15, 2026, with a response deadline of November 3, 2026, falling under NAICS code 541690.

Philadelphia Gas Works

POSTED

DEADLINE

Biostatistical Analysis & ProgrammingThis subcontract for Biostatistical Analysis and Programming supports prime contractors on cardiovascular research projects for the National Institutes of Health National Heart, Lung, and Blood Institute. The scope of work involves providing statistical oversight, data programming, and scientific analysis focused on cardiovascular disease progression. The selected provider will utilize SAS, R, or Stata to perform complex analyses and ensure all outputs meet NIH data reporting and peer-review standards. Key deliverables include cleaned datasets, detailed statistical analysis reports, and draft scientific manuscripts for publication and presentation. This opportunity falls under NAICS code 541690 and is managed under the Department of Health and Human Services. Interested parties must submit their responses by October 30, 2026.

National Institutes Of Health Nhlbi

POSTED

DEADLINE

More opportunities from Virginia → VITA eVA Statewide

Same awarding agency

License and Registration Fulfillment LogisticsThe License and Registration Fulfillment Logistics subcontract supports prime contractors on Virginia Information Technologies Agency projects within the Commonwealth of Virginia. The scope of work focuses on physical mailing and distribution services, including the management of USPS mailing fulfillment, pass-through postage accounts, and lockbox services for incoming applications. Utilizing high-volume mailing equipment, the provider is responsible for delivering physical licenses and decals while providing critical tracking data for integration into customer profiles. This opportunity is categorized under NAICS code 491110 and is associated with the VITA eVA Statewide agency. The solicitation was posted on October 5, 2026, with a response deadline set for November 6, 2026. The primary objective is to ensure the efficient delivery of physical credentials and the provision of detailed mailing tracking reports to maintain accurate record-keeping for the agency.

POSTED

DEADLINE

Registration and Waterfowl Blind Decal SupplyThis subcontract involves the supply of self-adhesive registration and waterfowl blind decals for prime contractors working on Virginia Information Technologies Agency projects. The scope of work requires the use of specialized adhesive printing equipment to produce weather-resistant and durable decals suitable for marine environments, utilizing a rotating four-color cycle to denote expiration years. The contract is managed through the VITA eVA Statewide agency for performance within the Commonwealth of Virginia. Interested parties must adhere to the timeline established by the posting date of October 5, 2026, with a response deadline set for November 6, 2026.

All Other Miscellaneous Manufacturing

POSTED

DEADLINE

Durable License and Registration Card ProductionThis subcontract for Durable License and Registration Card Production involves the supply and production of rigid plastic cards for prime contractors working on Virginia Information Technologies Agency projects. The selected provider must utilize industrial plastic card printers to produce cards with configurable numbering patterns while maintaining strict secure controls over designs and printed stock to prevent fraud. All operations must be supported by a secure storage facility to ensure the integrity of the physical deliverables. The contract is managed through VITA eVA Statewide for the Commonwealth of Virginia under NAICS code 323111. Interested parties must submit their responses by the deadline of November 6, 2026. The scope of work focuses on the delivery of high-quality, durable physical cards that meet the specific security and production standards required by the agency.

Commercial Printing (except Screen and Books)

POSTED

DEADLINE

Licensing and Registration Software SolutionThis subcontract opportunity involves the development and implementation of a comprehensive licensing and registration SaaS platform designed for prime contractors working on Virginia Information Technologies Agency projects. The scope of work includes building multi-channel interfaces, customer account systems, and sophisticated workflow capabilities for application routing. To ensure operational integrity and security, the solution must integrate HIN validation and maintain strict compliance with IRS Publication 1075 and US Coast Guard standards. The project will result in a fully operational, hosted software solution for license and registration management performed within the Commonwealth of Virginia. Interested parties should note that the response deadline is November 6, 2026, and the project falls under NAICS code 541511 for custom computer programming services.

Custom Computer Programming Services

POSTED

DEADLINE

Outdoor Recreational License Sales and Customer Engagement Solution

Solicitation # RFP 2025-05

RFP 2025-05 is a solicitation issued by the Virginia Information Technologies Agency (VITA) for an Outdoor Recreational License Sales and Customer Engagement Solution. The project aims to implement a comprehensive system for managing the sale and issuance of recreational licenses, watercraft registration, titling, and registration renewals across multiple channels, including online, telephone, mail, and dealer agents. The solution must include customer engagement capabilities to track interactions via account systems and must adhere to Agency and US Coast Guard requirements. Key deliverables include the production and fulfillment of durable plastic cards and specific self-adhesive decals for registration and waterfowl blinds, utilizing a rotating four-color cycle for expiration years. The contract is structured as a Firm Fixed Price agreement and is governed by the Virginia Public Procurement Act and VITA Standard Contract terms, including mandatory IRS Publication 1075 compliance. Evaluation is based on a weighted criteria system, starting with a pass/fail preliminary assessment of prerequisites. Suppliers must be registered in eVA to submit proposals and are required to provide pricing through two specific models: a DWR Funded Model and a Self Funded Model. The agreement includes strict requirements for security, including potential background checks and NDAs for personnel, and mandates compliance with various civil rights and accessibility acts. Acceptance of the final solution is contingent upon the Authorized User's determination that all functionality listed in the requirements is successfully operational.

Computer Systems Design Services

POSTED

DEADLINE

Microsoft License Service Providers (LSPs)

Solicitation # RFP 2025-07

The Virginia Information Technologies Agency (VITA) issued RFP 2025-07 to solicit authorized Microsoft License Service Providers (LSPs) to provide Microsoft products, online services, and reseller services to VITA and its authorized users. To qualify, suppliers must provide evidence of current LSP status and authorization to transact cloud services for U.S. Government environments, specifically the Government Community Cloud. The contract features an initial two-year term with the option for up to four one-year renewals. Selected providers are responsible for order management, administration of various Microsoft License Agreements, and providing guidance and training, all while offering a minimum percentage discount off the Microsoft Estimated Retail Price. The agreement mandates strict performance and security standards, including the implementation of cXML-based quote retrieval via the eVA portal and adherence to IRS Publication 1075 for handling Federal Tax Information. Service Level Agreements define financial remedies for non-compliance regarding quoting accuracy, invoice delivery, and product delivery timelines. Suppliers must assign dedicated key personnel, including primary and back-up account managers for both state agencies and localities. Evaluation is based on a numerical scoring system and a value/cost ratio, with a prerequisite pass/fail check on LSP authorization. Additionally, the contract emphasizes socioeconomic goals through a required Supplier Procurement and Subcontracting Plan focusing on DSBSD-certified small and micro businesses.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Microsoft Channel Partner / Value-Added Reseller (VAR)This subcontract opportunity is for a Microsoft Channel Partner or Value-Added Reseller to provide administrative and logistical services for prime contractors working on Virginia Information Technologies Agency projects. The selected provider must hold authorized Microsoft License Service Provider status to manage procurement and fulfillment of license orders. Key responsibilities include coordinating between Microsoft and the prime contractor to ensure accurate licensing levels, such as Level D Enterprise, through the use of procurement tools and licensing management portals. The contract is associated with NAICS code 423430 and will be performed within the Commonwealth of Virginia.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Microsoft Technical Training ProviderThe Microsoft Technical Training Provider subcontract involves delivering authorized training for VITA users on projects for prime contractors within the Commonwealth of Virginia. The selected provider will be responsible for conducting remote or on-site training courses, providing necessary courseware, and facilitating knowledge transfer sessions based on specific Microsoft SKUs. To qualify, the provider must hold Microsoft Certified Trainer status or be a recognized Microsoft Learning Partner, with the ultimate goal of delivering completed training sessions and user certifications. This opportunity is managed by the VITA eVA Statewide agency under NAICS code 611420. The solicitation was posted on September 25, 2026, with a response deadline of October 23, 2026. All services are to be performed within the Commonwealth of Virginia.

Computer Training

POSTED

DEADLINE

Microsoft Product & Online Services SupplierThis subcontract opportunity is for a Microsoft Product and Online Services Supplier to provide software licenses and online service subscriptions for prime contractors working on Virginia Information Technologies Agency projects. The supplier is responsible for delivering On-Premise Enterprise Level D SKUs and Microsoft Online Services, including the management of license keys and subscription activations. To be eligible, the provider must hold authorized Microsoft partner or distributor status. The contract is managed by the VITA eVA Statewide agency for performance within the Commonwealth of Virginia under NAICS code 423430. Interested parties must submit their responses by the deadline of October 23, 2026.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS