Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

IT Security & Compliance Auditing

Active

State & Local

Response Deadline11/10/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for IT Security and Compliance Auditing, managed by California Procurement Services, focuses on performing security validation for prime contractors involved in SFO SaaS projects. The primary objective is to ensure strict compliance with airport and federal data protection standards by validating cloud tenancy security and protecting City Data and Confidential Information. The scope includes preventing disabling code entry and utilizing security scanning and vulnerability management tools to adhere to PII and health information laws. The selected provider will be responsible for delivering detailed security validation reports to confirm all standards are met. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 10, 2026.

General Info

IT security and compliance auditing for SFO SaaS projects, due November 10, 2026.

Agency

California → Procurement ServicesView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

CA, USA

Set-Aside

NONE

Documents

This scope was carved out of 11211.52.

The full solicitation package (6 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

11211.52 San Francisco International Resource Management System/ Airport Operations Database Implementation, Maintenance and Support Services

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 15

subcontract

Response DeadlineNov 10

Submission deadline

Response Deadline

11/10/2026, 10:00:00 PM UTCin about 2 months

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia → Procurement Services

ContactsNo contacts available

OfficeN/A

Organization / Agency

California → Procurement Services

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security validation for prime contractors on SFO SaaS projects to ensure compliance with airport and federal data protection standards. Validates cloud tenancy security, protects City Data and Confidential Information, and prevents disabling code entry. Uses security scanning and vulnerability management tools to meet PII and health information laws. Delivers security validation reports.

Similar Contracts

Same NAICS industry code

Fairfax Software Maintenance and Support

Solicitation # FLHSMV-SS-008-27

The Florida Department of Highway Safety and Motor Vehicles intends to enter into a single source purchase agreement with Fairfax Software for maintenance and support services. This action is identified under solicitation number FLHSMV-SS-008-27 and is not a request for bids or proposals. The notice was posted on September 15, 2026, with a response deadline of October 6, 2026. The contract will be performed within the state of Florida, and Alma Sanchez serves as the primary point of contact for this procurement.

Department of Highway Safety and Motor Vehicles

POSTED

about 17 hours ago

DEADLINE

Enterprise Content Management (ECM) Maintenance

Solicitation # 28291

The Washington State Department of Enterprise Services is conducting a competitive procurement process under solicitation 12625 to establish statewide contracts for Enterprise Content Management maintenance. This initiative allows eligible purchasers to acquire ongoing software maintenance and subscription options for existing ECM solutions, specifically divided into two categories: Open Text Maintenance and Laserfiche Maintenance. The contract covers a wide range of commodity codes including business, architectural, and integrated software, as well as data storage and updating services. The solicitation was posted on September 15, 2026, with a final deadline for bid submissions on October 10, 2026. A pre-bid conference is scheduled for September 23, 2026, via Microsoft Teams. Interested vendors must be registered in Washington’s Electronic Business Solution to receive updates and submit bids. All inquiries regarding the procurement should be directed to the Procurement Coordinator, Leilani Konecny, by the question deadline of October 5, 2026.

Department of Enterprise Services

POSTED

about 17 hours ago

DEADLINE

Cybersecurity & Compliance AuditorThis subcontract for a Cybersecurity and Compliance Auditor involves performing security reviews and penetration testing for prime contractors on Ohio EPA projects. The scope of work includes conducting configuration reviews for operating systems, applications, and databases, executing bi-weekly log anomaly reports, and maintaining the System Security Plan. The contractor must ensure strict adherence to NIST 800-53, NIST 800-171, CJIS Security Policy, and IRS Special Publication 1075. Key deliverables include security audit reports, risk assessments, and compliance certifications. The opportunity is categorized under NAICS code 541519 and is associated with the EPA PM-ITS Info Tech Service and PM-Fiscal Administration units.

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

POSTED

about 18 hours ago

DEADLINE

Grammarly Business Enterprise Software SupplyThis subcontract provides brand-name Grammarly Business Enterprise licenses to prime contractors supporting Indian Health Service projects. The scope includes the provision of online writing assistance software tools and the management of license seats for a base year and four subsequent option years. To be eligible, providers must hold Grammarly Authorized Reseller status and meet strict security requirements, including FedRAMP authorization and SOC 2 Type II audit results. Managed by the Department of Health and Human Services under the Division of Acquisitions Policy HQ, the contract is set aside for Indian Small Business Economic Enterprise firms under NAICS code 541519. The performance location is based in Rockville, Maryland. The primary objective is the delivery of active, provisioned software licenses to ensure IHS users have access to professional writing tools.

Division Of Acquisitions Policy Hq

POSTED

about 22 hours ago

DEADLINE

Software Support for KASEMAKE and KASECUT LicensesThis subcontract through the National Archives and Records Administration provides software support and license maintenance for prime contractors managing industrial equipment projects in College Park. The scope of work includes troubleshooting, updates, and ensuring the validity of two KASEMAKE and two KASECUT software licenses for a one-year duration. Eligible providers must demonstrate OEM authorization or provide proof of their ability to support these specific systems. The successful contractor is responsible for delivering active software support agreements and fully functional licenses under NAICS code 541519.

Nara Contracting Office

POSTED

about 22 hours ago

DEADLINE

Medical Billing System Help Desk & Customer SupportThis subcontract for the Indian Health Service under the Department of Health and Human Services involves providing technical customer support and help desk services for medical claims billing systems. Based in Portland, the contractor will assist users with claim corrections and resubmissions from 8:00 AM to 7:00 PM PT, Monday through Friday. The role requires the use of CRM and remote support tools, as well as the delivery of ongoing technical support and training documentation. Qualified providers must possess knowledge of medical coding standards and complete mandatory HIPAA privacy training. The opportunity falls under NAICS code 541519 and was posted on September 15, 2026, with a response deadline of September 17, 2026.

Indian Health Service

POSTED

about 22 hours ago

DEADLINE

in about 14 hours

ISBEE: Brand Name-Grammarly Business Enterprise (Base + 4)

Solicitation # 75H70426Q00025

The Indian Health Service (IHS) is conducting a sources sought notice under the authority of the Buy Indian Act, 25 U.S.C. 47, to identify qualified Indian Small Business Economic Enterprises (ISBEEs) and other Indian Economic Enterprises (IEEs) capable of providing Grammarly Business Enterprise (Part Number GRMLYENT-200), a cloud-based writing assistance software tool, for approximately 600 employees across IHS facilities. This notice is not a solicitation for proposals but a market research initiative to assess the availability and capability of small Indian-owned businesses to fulfill this requirement, with the intent to potentially structure a future acquisition using a set-aside reserved exclusively for ISBEEs. Interested parties must submit a complete response by 11:00 a.m. EST on May 11, 2026, to Javier.medina-velazquez@ihs.gov, including their company name, address, Unique Entity ID and CAGE code, point of contact, size classification under NAICS code 541519 (150-employee size standard), a capability statement, and a signed Buy Indian Act Indian Economic Enterprise Representation Form. Responses are restricted to five pages total and must not include proprietary, classified, or sensitive information, as the government reserves the right to use non-proprietary details in any future solicitation without obligation to compensate respondents. The requirement involves licensing Grammarly Business Enterprise, with baseline authorization for 600 users in the base year and anticipated increases of 80 users annually across four option years, extending the potential contract period through June 14, 2031. Performance is entirely electronic, with no physical delivery, and all services must be accessed via secure online platforms. Compliance with federal cybersecurity and privacy standards is mandatory, including adherence to FedRAMP Moderate authorization, HIPAA, the Privacy Act, FISMA, NIST SP 800-53, and SOC 2 Type II certification. Contractors must execute a Business Associate Agreement, prevent the input of protected health information, ensure data remains under IHS ownership with no secondary use, implement SCIM for identity provisioning, enable BYOK and Confidential Mode, and provide annual compliance reporting. Any data breach must be reported within 24 hours. The contracting officer is Javier Medina-Velazquez, with Kevin Fulbright serving as the technical point of contact. The government will not acknowledge receipt, guarantee an award, or pay for submissions

Division Of Acquisitions Policy Hq

POSTED

about 22 hours ago

DEADLINE

UPS POWER SUPPLY SERVICES

Solicitation # N0017826Q6856

POSTED

about 22 hours ago

DEADLINE

Maintenance and Support Agreement for NIH Hazardous Waste Management Tracking Information Software (EnviroWare)

Solicitation # 75N98026Q01215

The National Institutes of Health (NIH) is seeking a firm-fixed-price maintenance and support agreement for EnviroWare, a proprietary software application used to track and manage hazardous waste at the NIH main campus and off-site facilities. The contract is intended as a non-competitive, sole-source award to Wastelinq, Inc., the proprietary owner of the software, under statutory authority 41 U.S.C. 1901. The primary objective is to ensure the system remains in good operating condition, meets all applicable codes and developer specifications, and maintains compliance with US EPA and Maryland Department of Environment regulations. The scope of work includes technical phone support during normal business hours, the implementation of security, Oracle, and Java patches to meet NIH ITB security requirements, and the provision of custom development enhancements at fixed hourly rates. The period of performance consists of a one-year base period starting September 28, 2026, with two optional one-year extensions. Services will be performed via remote connections or on-site at the NIH Hazardous Waste Management Facility in Bethesda, Maryland. All deliverables are subject to inspection and acceptance by the NIH Project Officer.

National Institutes Of Health Olao

POSTED

about 22 hours ago

DEADLINE

Non-Core Telecommunications Operations & Maintenance

Solicitation # 693JJ126Q000005

The Department of Transportation is soliciting a single Blanket Purchase Agreement (BPA) for non-core telecommunications operations and maintenance support services. This small business set-aside contract, with an estimated total value of 150 million dollars, covers an 84-month ordering period with a potential six-month extension. The scope includes the management of cabling and connectivity infrastructure, telecommunications closets, asset inventory, and moves, adds, and changes for voice and data customer provided equipment. Support services extend to IPTV, distributive antenna systems, data center operations and infrastructure management, and wireless support across DOT Headquarters, field sites, the FAA, the US Merchant Marine Academy, and the Stennis, MS disaster recovery location. Award will be based on the lowest price technically acceptable (LPTA) basis, following a pass/fail evaluation of a detailed certification checklist requiring specific industry certifications and experience. Technical evaluation focuses on the approach to the statement of work, management strategy, and corporate experience as a prime contractor within the last three years. The contractor must provide 24/7 support for assets in the Washington DC area and adhere to ITIL integrated processes and BICSI cabling standards. Administrative requirements include the use of the DELPHI eInvoicing system and compliance with various TAR and FAR clauses regarding security, personnel qualifications, and organizational conflicts of interest.

693JJ3 Acquisition And Grants Mgt

POSTED

about 22 hours ago

DEADLINE

Protective Distribution System (PDS) Preventive Maintenance and Support Services

Solicitation # W912PX26PA004

The Regional Contracting Office intends to award a sole source purchase order to CyberSecure IPS, LLC for the maintenance and support of the CyberSecure Alarmed Carrier Protective Distribution System (PDS) at the Joint Interagency Task Force South compound in Key West, Florida. This procurement is conducted under Title 41 U.S.C. 1901(e)(2) and FAR 12.102(a) because the proprietary nature of the system's firmware and software makes the Original Equipment Manufacturer the only viable source. The services are critical for maintaining a legal mandate for continuous monitoring of classified fiber-optic network runs and ensuring the system retains its active Authority to Operate. The scope of work includes the annual renewal of proprietary IMS Gold software licenses, 24/7 off-site technical support via telephone and ticketing, and one annual on-site visit for hardware calibration, performance analysis, and administrator training. Because the system operates on an air-gapped network, all technical coordination must be handled off-network. While this is a sole-source notice, interested parties may submit capability statements to Contracting Officer Lian Pinzon, provided they can demonstrate legal access to the OEM's proprietary source code and software patches.

0410 Aq Hq Contract

POSTED

about 22 hours ago

DEADLINE

in about 2 hours

SuperMicro manufactured servers hardware

Solicitation # N0042126Q1375

Solicitation N00421-26-Q-1375 is a firm fixed-price procurement issued by the Naval Air Warfare Center Air Division for the purchase of 12 SuperMicro X13 CloudDC 1U servers to support the PMA-290 program. This opportunity is a total set-aside for small businesses under FAR Part 52.219-6. The required hardware must be new, brand-name SuperMicro equipment with no substitutions allowed, featuring specific components including 4514Y CPUs, 32GB DDR5 memory, Micron 7450 PRO NVMe storage, and FIPS-supported TPM 2.0 modules. Vendors must provide a minimum one-year warranty with advance replacement for defective parts and submit signed documentation verifying they are an authorized distributor. Quotes must be submitted via email to Roshaia Thomas and Douglas Owen by September 18, 2026, at 4:00 pm Eastern Standard Time. Award will be granted to the vendor offering the lowest aggregate firm fixed-price quotation that meets all technical requirements. Offerors must be registered in the System for Award Management and include their CAGE code, Tax ID, and estimated delivery date in their response. Delivery is required within four weeks from the date of award to the Commander Naval Air Warfare Center Air Division in Patuxent River, Maryland. All electronic equipment packaging must be marked with a DO NOT SCAN sticker, and invoicing must be processed through the Wide Area Workflow system.

Naval Air Warfare Center Air Division

POSTED

about 22 hours ago

DEADLINE

More opportunities from California → Procurement Services

Same awarding agency

Hardware Supply (Edge Hardware & Workstations)This subcontract, managed by California Procurement Services, involves the supply of physical hardware for prime contractors working on SFO RMS/AODB projects. The scope of work includes providing high-performance user and administration workstations as well as industrial edge computing hardware, all of which must strictly adhere to SFO IT specifications. The selected provider is responsible for the delivery and installation of the workstations and edge hardware directly at the airport facility. This opportunity falls under NAICS code 423430, with a response deadline set for November 10, 2026.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

about 11 hours ago

DEADLINE

in about 2 months

Specialized IT Training ServicesThis subcontract for Specialized IT Training Services, managed by the California Procurement Services agency, focuses on the instruction of airport users and administrators on RMS/AODB platforms for prime contractors involved in SFO projects. The selected provider will be responsible for developing comprehensive training materials and delivering hands-on instruction through the use of training sandboxes to ensure all personnel meet required proficiency and user acceptance standards. The primary objective of the contract is to deliver a workforce fully capable of operating the RMS/AODB systems. This opportunity falls under NAICS code 611430 and was posted on September 15, 2026, with a response deadline of November 10, 2026.

Professional and Management Development Training

POSTED

about 11 hours ago

DEADLINE

in about 2 months

Network Engineering & ConnectivityThe Network Engineering and Connectivity subcontract, managed by California Procurement Services, focuses on establishing and maintaining network connectivity between physical airport infrastructure and cloud hosting environments for prime contractors on SFO projects. The scope of work includes LAN provisioning and the configuration of cloud connectivity gateways, such as ExpressRoute or Direct Connect, to ensure high-speed, low-latency data transmission while adhering to all airport network standards. This opportunity is categorized under NAICS code 541512 and was posted on September 15, 2026. Interested parties must submit their responses by the deadline of November 10, 2026.

Computer Systems Design Services

POSTED

about 11 hours ago

DEADLINE

in about 2 months

Software Integration & API DevelopmentThis subcontract for Software Integration and API Development focuses on the technical integration of AODB/RMS with third-party airport systems for prime contractors on SFO projects. The scope of work involves developing and documenting REST and event-based APIs to connect the AODB with Information Display Systems and Enterprise Data Platforms, while utilizing event-based integration middleware to ensure proper data-domain structure alignment. The project is managed by the California Procurement Services agency under NAICS code 541511. The solicitation was posted on September 15, 2026, with a response deadline set for November 10, 2026. The primary deliverables include functional data interfaces and comprehensive API specifications.

Custom Computer Programming Services

POSTED

about 11 hours ago

DEADLINE

in about 2 months

Cloud Infrastructure & Hosting ServicesThe Cloud Infrastructure and Hosting Services subcontract, managed by California Procurement Services, focuses on providing and managing cloud-native hosting environments for prime contractors involved in SFO RMS/AODB projects. The scope of work involves the provision of cloud landing zones and tenancy management across AWS, Azure, or GCP to maintain mission-critical availability and adhere to specific RTO and RPO thresholds. The technical execution relies on CNCF-compliant cloud-native architecture and well-architected principles to ensure a resilient environment with zero perceptible latency. This opportunity falls under NAICS code 518210, with a response deadline of November 10, 2026.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 11 hours ago

DEADLINE

in about 2 months

11211.52 San Francisco International Resource Management System/ Airport Operations Database Implementation, Maintenance and Support Services

Solicitation # 11211.52

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 11 hours ago

DEADLINE

in about 2 months

Safety Management Systems (SMS) ConsultantThis subcontract for a Safety Management Systems Consultant focuses on enhancing the Safety and Health Management Systems for prime contractors operating on City and County of San Francisco SFO projects. The selected consultant will benchmark these systems against ANSI/ASSP Z10 and ISO 45001 standards, conduct audits of OSHA 300/301 logs, and review incident investigations to improve digital monitoring and reporting tools. The primary deliverables include a comprehensive enhancement roadmap and a detailed audit report. The project requires specialized expertise in SHMS frameworks and OSHA recordkeeping. Interested parties must submit their responses by October 5, 2026, for this opportunity managed by the Procurement Services agency in California under NAICS code 541690.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

OSH Training SpecialistThe OSH Training Specialist subcontract, managed by Procurement Services in California, focuses on evaluating safety training delivery for prime contractors operating on City and County of San Francisco SFO projects. The scope involves assessing training requirements and delivery methods, including digital and blended learning, for over 1,800 employees across 240 distinct job classifications. The specialist will also evaluate employee awareness programs and recommend curricula updates to ensure full compliance with Cal/OSHA and OSHA standards. The primary deliverables for this engagement include a comprehensive training adequacy assessment and a structured delivery framework. This opportunity was posted on September 4, 2026, with a response deadline of October 5, 2026. The project falls under NAICS code 611430, focusing on professional and management development training.

Professional and Management Development Training

POSTED

DEADLINE

Industrial Safety AuditorThe Industrial Safety Auditor subcontract involves performing physical site audits for prime contractors on City and County of San Francisco SFO projects. The selected provider will inspect office areas, trade shops, custodial areas, and public zones to identify hazards and determine root causes. Key deliverables include the creation of internal audit tools, checklists, and protocols, as well as the submission of detailed site inspection reports and a comprehensive audit toolkit. Qualified candidates must possess ISO 45001 Auditing certification and demonstrated experience working within large-scale airport environments. This opportunity is categorized under NAICS code 541620 and is managed by Procurement Services for the state of California. The response deadline for this solicitation is October 5, 2026.

Environmental Consulting Services

POSTED

DEADLINE

Occupational Safety and Health Policy ConsultantThe Occupational Safety and Health Policy Consultant subcontract involves performing comprehensive gap analyses of safety policies for prime contractors operating on City and County of San Francisco SFO projects. The consultant is responsible for reviewing critical safety programs, including Injury and Illness Prevention Plans, Workplace Violence Prevention Plans, Hazard Communication, and Hazardous Waste Management programs to ensure compliance with Title 8 CCR and federal OSHA standards. Qualified candidates must possess a Certified Safety Professional certification and a deep understanding of regulatory requirements to deliver detailed written recommendations for corrective actions. This opportunity is managed by Procurement Services for the state of California, with a response deadline of October 5, 2026.

Environmental Consulting Services

POSTED

DEADLINE

CT 50454 Occupational Safety and Health Programs Consulting Services

Solicitation # 50454

The City and County of San Francisco and the San Francisco International Airport have issued Request for Proposals CT 50454 for Occupational Safety and Health Programs Consulting Services. Posted on September 4, 2026, with a response deadline of October 5, 2026, this solicitation seeks a professional services contractor to provide expertise in occupational safety and health programs. The procurement process is managed by the Procurement Services agency and is categorized under NAICS code 541690. The selected contractor will be required to enter into a professional services agreement and adhere to the City of San Francisco First Source Hiring Program. Proposals must include a fee structure consisting of a not-to-exceed cost for policy and programs review as well as a fully burdened hourly rate schedule for as-needed services. Evaluation will be based on specific scoring criteria and minimum qualifications to ensure the contractor can effectively deliver the required safety and health consulting services for the airport.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Mobile Food Truck ServicesThis subcontract for Mobile Food Truck Services involves providing on-site mobile food operations for prime contractors working on City and County of San Francisco projects. The service provider will operate a fully equipped food truck or mobile vending unit on designated city or airport grounds, offering themed or specialty menus for employee functions and community events. To qualify for this engagement, the provider must maintain local health department permits, achieve City-approved Supplier status, and adhere to Green Purchasing compliance standards. The contract falls under NAICS code 722330 and is managed through the Procurement Services agency in California.

Mobile Food Services

POSTED

DEADLINE

in over 972 years

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS