Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

IT Audit and Cybersecurity Services

Active

State & Local

Response Deadline12/02/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for IT Audit and Cybersecurity Services supports prime contractors in performing critical evaluations for the Southern California Regional Rail Authority (Metrolink). The scope of work focuses on IT governance and cybersecurity assessments, specifically targeting vulnerability management, identity and access management, and the evaluation of both cloud and premises-based systems. All security and penetration testing must be conducted in accordance with established NIST and ISACA frameworks, culminating in formal audit reports that detail specific findings, root causes, and strategic recommendations. The project is based in Los Angeles, California, under NAICS code 541512. Interested parties should note that the solicitation was posted on October 28, 2026, with a response deadline of December 2, 2026.

General Info

IT audit and cybersecurity services for Metrolink in Los Angeles using NIST frameworks.

Agency

Southern California Regional Rail Authority (Metrolink)

NAICS

541512 - Computer Systems Design Services

Place of Performance

Los Angeles, CA, 90017, USA

Set-Aside

NONE

Documents

This scope was carved out of QM171-27.

The full solicitation package (12 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

On-Call Audit Services Bench

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 28

subcontract

Response DeadlineDec 2

Submission deadline

Response Deadline

12/02/2026, 10:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencySouthern California Regional Rail Authority (Metrolink)

ContactsNo contacts available

OfficeN/A

Organization / AgencySouthern California Regional Rail Authority (Metrolink)

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs IT governance and cybersecurity evaluations for prime contractors on Southern California Regional Rail Authority (Metrolink) audit projects. Assesses cloud and premises-based systems, identity and access management, and vulnerability management. Conducts security testing and penetration testing per NIST and ISACA frameworks. Delivers formal audit reports including findings, causes, and recommendations.

Similar Contracts

Same NAICS industry code

SQL Database Integration and OptimizationThis subcontract for the Nebraska Public Power District focuses on SQL Database Integration and Optimization. The selected provider will perform backend integration for prime contractors, specifically connecting a web interface to an existing SQL database. Key technical requirements include modifying database structures to enable GIS layer permissions and map-based searches, optimizing performance to handle high document volumes, and ensuring seamless data integrity while transitioning from Microsoft Access. Qualified candidates must hold database administration certifications to deliver a fully integrated and optimized SQL backend. The solicitation was posted on October 28, 2026, with a response deadline of November 25, 2026. This project falls under NAICS code 541512, emphasizing specialized computer systems design services.

Nebraska Public Power District

POSTED

about 4 hours ago

DEADLINE

Network Configuration and IntegrationThe Network Configuration and Integration subcontract involves configuring network hardware and routing protocols for prime contractors working on State of Illinois DoIT network projects. The scope of work focuses on implementing BGP or OSPF for failover, configuring VLANs, and establishing firewalls to ensure redundant paths. To guarantee a fully configured and redundant network architecture, the contractor must perform simulated outage testing to verify that automatic failover functions correctly. This opportunity is associated with the Illinois Telecommunications agency under NAICS code 541512. The solicitation was posted on October 28, 2026, with a response deadline of November 18, 2026.

TELECOM448 - Telecommunications

POSTED

about 6 hours ago

DEADLINE

Intercom System Integration and Technical SetupThis subcontract for Intercom System Integration and Technical Setup involves the high-level installation, configuration, and integration of Valcom head-end controllers and consoles for prime contractors working on Lauderdale County School District projects. The scope of work specifically includes the configuration of VE6090-1 controllers, VE8092 IP consoles, and VEEPL-250 licenses, culminating in system-wide testing and written acceptance coordination to deliver a fully operational integrated system. To be eligible for this engagement, the contractor must hold a Mississippi State Board of Contractors Certificate of Responsibility. The project falls under NAICS code 541512 and is managed through MPTAP in the state of Mississippi.

POSTED

about 7 hours ago

DEADLINE

in about 17 hours

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0269

This procurement, issued by DLA Troop Support Construction and Equipment T and IFO EQ under solicitation SPE8EN-27-T-0269, is for the acquisition of 18 digital computer systems. The required item is a Commercial Off The Shelf product, specifically Panasonic Corporation part number FZ-55DZ-0EKM, identified by NSN 7010307006647. The contract is designated as a total small business set-aside under FAR 19.5. Delivery is required within 167 days after the order, with a need ship date of April 26, 2027, and an original required delivery date of August 20, 2027. Shipping is FOB destination to DLA Distribution San Joaquin in Tracy, California. The contract mandates strict adherence to quality and packaging standards, including ASTM D3951 and MIL-STD-129, with the DLA Master List of Technical and Quality Requirements taking precedence. Specific material restrictions are in place regarding the intentional addition of mercury, requiring shock-proof containment for any mercury-containing portable instruments per NAVSEA 5100-003D. Inspection and acceptance will occur at the destination per FAR 52.246-1. Administrative requirements include the use of Wide Area WorkFlow for invoicing and compliance with DFARS regulations regarding the Buy American Act, safeguarding covered defense information, and restrictions on covered defense telecommunications equipment.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

about 8 hours ago

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0271

Solicitation SPE8EN-27-T-0271 is a federal procurement issued by the Defense Logistics Agency for the acquisition of eight digital computer systems, specifically Rugged Science LLC part number REC-MA3001, identified by NSN 7010-01-722-2099. The requirement is designated as a Women-Owned Small Business set-aside with an evaluation preference for HUBZone concerns. Delivery is required within 167 days after the date of order, with a need ship date of April 26, 2027, and a final required delivery date of August 21, 2027. The items are to be delivered FOB Origin to the DLA Distribution DDSP New Cumberland facility in Pennsylvania, where both inspection and acceptance will occur. The contract mandates strict adherence to technical and quality standards, including MIL-STD-129 for marking and MIL-STD-2073-1E for packaging. Special requirements include the prohibition of intentionally added mercury, except for specific functional uses, and the requirement for shock-proof containment for mercury-containing portable instruments per NAVSEA 5100-003D. Administrative compliance requires the use of the Wide Area WorkFlow system for invoicing and payment. Key regulatory clauses are incorporated, including DFARS 252.204-7012 for safeguarding covered defense information, the Buy American Act, and prohibitions against the acquisition of covered defense telecommunications equipment. Offers utilizing additive manufacturing are ineligible for award.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

about 8 hours ago

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0242

Solicitation SPE8EN-27-T-0242 is a federal procurement issued by the Defense Logistics Agency (DLA) Troop Support for the acquisition of three digital computer systems, identified by NSN 7010-01-722-5537 and part number 7K3P8AV from Hewlett-Packard Company. The contract is not a small business set-aside and falls under NAICS code 541512. Delivery is required 167 days after award, with a need ship date of April 26, 2027, and an original required delivery date of July 23, 2027. The items are to be delivered FOB Origin to the DLA Distribution DDSP New Cumberland Facility in Pennsylvania. The contract mandates strict adherence to the DLA Master List of Technical and Quality Requirements, including specific packaging standards under ASTM D3951 and RP001, and marking requirements per MIL-STD-129. Special material restrictions apply, specifically prohibiting the intentional addition of mercury or mercury-containing compounds. Administrative requirements include the use of the Wide Area WorkFlow (WAWF) system for invoicing and payment. Compliance with various federal regulations is required, including the Buy American Act, the Berry Amendment, and DFARS clauses regarding safeguarding covered defense information and the prohibition of certain telecommunications equipment.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

about 8 hours ago

DEADLINE

INSTALLATION AND EQUIP

Solicitation # SPE8EN-27-T-0226

Solicitation SPE8EN-27-T-0226 is issued by DLA Troop Support, Construction and Equipment T and IFO EQ for the procurement of seven installation and equipment kits for data processing, identified by NSN 7010-01-493-4191. The requirement is categorized under NAICS code 541512. Delivery is required within 167 days after receipt of order, with a need ship date of April 26, 2027, and an original required delivery date of October 10, 2027. Shipping is FOB Origin, with the destination for inspection and acceptance being DLA Distribution Jacksonville, Florida. The contract mandates strict adherence to quality and technical standards, including the DLA Master List of Technical and Quality Requirements and MIL-STD-129 for marking and labeling. Packaging must comply with ASTM D3951 and RP001 for palletization. Key compliance requirements include a Cybersecurity Maturity Model Certification (CMMC) Level 2 Self-Assessment and adherence to the Buy American Act and Berry Amendment. Payment and receiving reports must be processed electronically through the Wide Area WorkFlow (WAWF) system. Quotations must be submitted via the DLA Internet Bid Board System (DIBBS) by November 9, 2026.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

about 8 hours ago

DEADLINE

Cisco Security Maintenance and Support ProviderThis subcontract opportunity is for a Cisco Security Maintenance and Support Provider to deliver technical support and software enhancement services for prime contractors working on Maryland Insurance Administration projects. The scope of work includes providing Basic Cisco Support for Secure Endpoint and Duo, as well as Enhanced Software Support for ASAv30 eDelivery and FPR2120 Threat Defense, utilizing the Cisco Technical Assistance Center to ensure active maintenance and software updates. Qualified candidates must hold Authorized Cisco Support Partner status and possess CCNA or CCNP Security certifications. The project falls under NAICS code 541512, with a response deadline set for November 3, 2026.

Maryland Insurance Administration

POSTED

about 8 hours ago

DEADLINE

LMS Technical Integration ServicesThe LMS Technical Integration Services subcontract involves providing specialized technical installation and configuration of training assets for prime contractors working on Texas Department of Family and Protective Services projects. The primary objective is to install and host project source files within the DFPS Learning Station, offering expert technical consultation to guarantee that all materials are fully operational and accessible within the live environment. This engagement focuses on the delivery of a fully functional training system hosted on the agency's learning management system. The opportunity is categorized under NAICS code 541512 and is associated with the Texas Department of Family and Protective Services, with a response deadline set for November 12, 2026.

Department of Family and Protective Services

POSTED

about 10 hours ago

DEADLINE

TAPS Systems Integration ServicesThe TAPS Systems Integration Services subcontract focuses on the technical integration of the TAPS platform with existing agency systems for prime contractors working on City of Tucson Transportation and Mobility projects. The scope of work involves the development of custom APIs and standard connectors to facilitate seamless data flow between TAPS and various third-party systems, including payment gateways, APC, GTFS, and CAD/AVL, utilizing middleware for connectivity. To ensure long-term flexibility and prevent vendor lock-in, the contractor must adhere to open documentation standards. This project falls under NAICS code 541512 and is managed by the Transportation and Mobility agency in Arizona, with a response deadline set for November 30, 2026.

Transportation & Mobility

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Transit Account and Passenger System (TAPS)

Solicitation # 270200

The City of Tucson, through the Transportation and Mobility agency, has issued a sources-sought Request for Information (RFI) under solicitation number 270200 for a Transit Account and Passenger System (TAPS). This initiative seeks to establish an enterprise customer account platform rather than a simple card database to support fixed-route bus and streetcar services. The scope encompasses the planning, design, implementation, and operation of a system for rider registration, customer account management, credentialing, utilization tracking, and reporting. A primary objective is to ensure the platform is accessible, multilingual, and usable for riders regardless of smartphone ownership, while maintaining secure interfaces and open documentation to prevent vendor lock-in. The agency is utilizing this RFI to gather market research on available solution models, implementation timelines, and cost drivers to inform a future procurement strategy. Key areas of interest include cybersecurity frameworks, identity assurance, and the potential for future account-based fare collection. While this is not a formal request for proposals or a binding contract, the agency is requesting non-binding, order-of-magnitude pricing for various components, including one-time implementation, software subscriptions, cloud hosting, field hardware, and professional services. Responses are due by November 30, 2026, and should be submitted as electronic PDFs following the suggested response format.

Transportation & Mobility

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Key Management Software Implementation and ConfigurationThe Key Management Software Implementation and Configuration subcontract, issued by the Rockdale County Board of Commissioners in Georgia, focuses on configuring the software layer of key management systems for prime contractors working on Rockdale County Sheriff’s Office jail projects. The scope of work includes establishing key-set information, user access controls, alerts, notifications, and audit trail reporting. To ensure operational integrity, the contractor must adhere to County Change Management Procedures and provide comprehensive proof of testing for all configurations. The primary objective is the delivery of a fully configured software system featuring verified access controls and reporting functions. This project falls under NAICS code 541512, with a response deadline set for December 3, 2026.

Rockdale County Board of Commissioners

POSTED

about 10 hours ago

DEADLINE

in about 1 month

More opportunities from Southern California Regional Rail Authority (Metrolink)

Same awarding agency

Rail Safety and Regulatory Compliance AuditThis subcontract for the Southern California Regional Rail Authority (Metrolink) involves performing safety and regulatory compliance audits for prime contractors. The selected provider will evaluate adherence to railroad safety regulations and operational standards, review safety protocols and regulatory filings, and deliver expert recommendations and compliance findings to be integrated into formal audit reports. The project is based in Los Angeles, California, under NAICS code 541620. Interested parties must submit their responses by the deadline of December 2, 2026.

Environmental Consulting Services

POSTED

about 18 hours ago

DEADLINE

in about 1 month

Railroad Construction and Project Audit SMEThis subcontract opportunity seeks a Subject Matter Expert to provide technical guidance for audit projects associated with the Southern California Regional Rail Authority, also known as Metrolink. The selected provider will support prime contractors by auditing railroad project construction costs, evaluating project management effectiveness, and reviewing contract administration. A primary focus of the role is ensuring strict compliance with industry-specific regulations and standards while delivering detailed technical findings and workpaper support to facilitate final audit reports. The project is based in Los Angeles, California, and falls under NAICS code 541611. Interested parties should note that the response deadline is December 2, 2026. This engagement is critical for maintaining financial and operational oversight of rail infrastructure investments within the region.

Administrative Management and General Management Consulting Services

POSTED

about 18 hours ago

DEADLINE

in about 1 month

On-Call Audit Services Bench

Solicitation # QM171-27

The Southern California Regional Rail Authority (Metrolink) is seeking proposals for an on-call audit services bench under solicitation QM171-27. This is an indefinite quantity/indefinite delivery contract where work is released through Contract Task Orders awarded via second-tier competition. The contract is anticipated to be executed in January 2027, featuring a three-year base period with options for renewal. Eligible proposers must be licensed Certified Public Accounting (CPA) firms that have received a pass rating on their most recent external peer review. The scope of work includes professional audit services, including the evaluation of cybersecurity and internal controls for cloud-based and third-party systems. This is a best-value procurement where the Authority will evaluate proposals based on technical and price criteria. To be included in the competitive range, proposers must achieve a minimum technical score of 52 points. Required submission documents include a technical proposal in PDF format, a price proposal in its native format using fully burdened hourly labor rates, and various certification forms including the Proposal Letter, Responsible Proposer's Questionnaire, and certifications regarding non-discrimination and lobbying restrictions. The response deadline is December 2, 2026, at 2:00 PM PT, with all submissions required through the designated solicitation portal.

Offices of Certified Public Accountants

POSTED

about 18 hours ago

DEADLINE

in about 1 month

General Other Track Materials (OTM) SupplierThis subcontract agreement establishes a partnership for the supply of General Other Track Materials to support prime contractors working on Southern California Regional Rail Authority projects. The scope of work involves the sourcing and delivery of essential rail hardware, specifically tie pads, spring clips, and corrosion-resistant screw spikes. All materials must be manufactured from corrosion-resistant steel and rubber or composite materials in strict accordance with established rail industry specifications. Logistics for the delivery of these components are managed through Blanket Purchase Agreement releases. The contract is categorized under NAICS code 332312 and is associated with the Metrolink agency in California. Interested parties should note the response deadline of December 1, 2026, to ensure compliance with the procurement timeline.

Fabricated Structural Metal Manufacturing

POSTED

DEADLINE

in about 1 month

Insulated Fast Clip Joint Assembly SupplierThis subcontract agreement establishes a partnership to supply Insulated Fast Clip Twin Shoulder Joint Assemblies for prime contractors operating on Southern California Regional Rail Authority (Metrolink) projects. The scope of work involves the assembly and delivery of complex joint components, specifically Part number ASY 10220, ensuring all deliverables strictly adhere to Engineering Standard ES2368. The opportunity is categorized under NAICS code 339993 and is associated with the state of California. Interested parties must note the response deadline of December 1, 2026, to provide the specialized joint assemblies required for these rail infrastructure projects.

Fastener, Button, Needle, and Pin Manufacturing

POSTED

DEADLINE

in about 1 month

Rail Insulator Component SupplierThis subcontract agreement establishes a partnership for the supply of polymer and composite rail insulators to prime contractors working on Southern California Regional Rail Authority (Metrolink) projects. The scope of work involves the manufacture of standard and side post insulators, specifically field and gauge types, designed for Pandrol E-Clip systems in accordance with Engineering Standard ES2365. These components are produced using high-density polymers in widths of 5.4mm and 8mm, with a total delivery requirement exceeding 4,100 units across various insulator specifications. The procurement is categorized under NAICS code 325211 and is managed through the California agency framework. Interested parties must adhere to the timeline associated with the solicitation, which was posted on October 19, 2026, with a final response deadline of December 1, 2026.

Plastics Material and Resin Manufacturing

POSTED

DEADLINE

in about 1 month

Pandrol Fastclip Assembly SupplierThis subcontract agreement establishes a partnership for the manufacture and supply of galvanized Pandrol Fastclip FC1601 assemblies with toe insulators, specifically designed for 6 inch base rails. The supplier is responsible for ensuring all delivered components meet Engineering Standards ES2366 and ES2367 to support prime contractors working on Southern California Regional Rail Authority projects. The contract mandates the annual delivery of 4,218 assemblies on an FOB Destination basis. These components must be manufactured using galvanized steel and adhere strictly to the FC1601 series specifications to ensure compatibility and safety for Metrolink rail infrastructure.

Fastener, Button, Needle, and Pin Manufacturing

POSTED

DEADLINE

in about 1 month

Track Concrete Fastening OTM

Solicitation # PO1060-27

The Southern California Regional Rail Authority (Metrolink) is soliciting bids for solicitation number PO1060-27 to procure Track Concrete Fastening Other Track Materials (OTM). This Indefinite Delivery/Indefinite Quantity (IDIQ) contract is structured as a Blanket Purchase Agreement with a firm fixed price for a base term of two years, including two one-year renewal options. The scope involves the supply of various rail fastening hardware, including Pandrol clips, insulators, tie pads, and screw spikes, all of which must meet specific SCRRA engineering standards. Materials are to be delivered FOB Destination to locations specified by the Authority via individual purchase order releases. The contract will be awarded to the lowest responsive and responsible bidder. Bidders must submit a comprehensive proposal package electronically by December 1, 2026, including a detailed price file for 26 line items, a list of current and completed contracts from the last five years, and various certifications regarding non-discrimination, non-collusion, and lobbyist restrictions. Awardees are required to maintain a one-year manufacturing warranty and specific insurance coverages, including Commercial General Liability of at least 1,000,000 dollars per occurrence. Payments are processed within 30 days of invoice approval, with a requirement that all financial records be maintained for three years following the contract's completion.

Fastener, Button, Needle, and Pin Manufacturing

POSTED

DEADLINE

in about 1 month

Enterprise Application Integration TestingThis subcontract opportunity, titled Enterprise Application Integration Testing, is issued by the Southern California Regional Rail Authority (Metrolink) in California. The project focuses on the configuration and validation of automated tests for prime contractors, specifically targeting data flow validation and reconciliation across Oracle EBS, EAM, and Salesforce platforms. The scope of work includes setting up backend data validation and API integration tests to ensure the seamless delivery of validated data-flow and integration test scripts for enterprise applications. The solicitation was posted on October 2, 2026, with a response deadline of November 12, 2026. Classified under NAICS code 541511, the contract requires specialized technical expertise in enterprise application integration and automated testing to support the authority's regional rail infrastructure projects.

Custom Computer Programming Services

POSTED

DEADLINE

Positive Train Control (PTC) Automation ConfigurationThis subcontract focuses on the configuration of automation tools for safety-critical rail systems supporting prime contractors on Southern California Regional Rail Authority projects. The scope of work involves developing automated tests for Positive Train Control onboard software displays, specifically validating visual elements such as alerts, prompts, and colors. Additionally, the contractor will automate tests for dispatch systems and back-office server graphical user interfaces using PTC simulation environments to deliver fully configured automated test suites. The project is associated with the Southern California Regional Rail Authority and falls under NAICS code 541511. Interested parties must adhere to the timeline established by the posting date of October 2, 2026, with a final response deadline of November 12, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Installation, Training, and Start-up ServicesThis subcontract for Installation, Training, and Start-up Services supports prime contractors on projects for the Southern California Regional Rail Authority. The selected provider will be responsible for the technical installation and configuration of COTS testing tools within the agency's IT environment, ensuring all start-up operations are properly configured. Success in this role requires specialized knowledge of the SCRRA enterprise application architecture and IT infrastructure. The primary objective of the contract is to deliver a fully operational installed system and ensure agency staff are proficient through comprehensive user training. Interested parties should note that the response deadline is November 12, 2026, and the work falls under NAICS code 541512.

Computer Systems Design Services

POSTED

DEADLINE

Automated Software Testing Tool (COTS License)This subcontract opportunity with the Southern California Regional Rail Authority (Metrolink) involves the provision of a Commercial Off-the-Shelf software platform designed for prime contractors. The scope of work focuses on delivering software licenses and platform access for automated regression testing, specifically incorporating advanced capabilities such as image recognition and Optical Character Recognition tools. The required platform must support data-driven testing through various formats, including CSV, Excel, databases, and both REST and SOAP APIs. This functionality is essential for ensuring compatibility and performance across Oracle EBS, EAM, and Salesforce systems. Interested parties should note the response deadline of November 12, 2026.

Software Publishers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS