Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

IT Security & Privacy Risk Management Framework (RMF)

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Department of Commerce is forecasting a requirement for an IT Security and Privacy Risk Management Framework (RMF). This initiative, categorized under NAICS code 541512, focuses on establishing and maintaining robust security and privacy standards to manage organizational risk. The work is slated to be performed in Gaithersburg. Administrative inquiries for this opportunity are directed to Aijun Zhang, with additional small business support provided by the DOC OSDBU. While specific solicitation details and set-aside designations are not yet available, the forecast indicates a strategic focus on enhancing the agency's overall IT security posture.

General Info

Department of Commerce seeks IT Security and Privacy RMF services in Gaithersburg.

Agency

Department of Commerce

NAICS

541512 - Computer Systems Design Services

Place of Performance

GAITHERSBURG, MD, USA

Set-Aside

NONE

Documents

0

No documents available

Documents will appear here when they are available.

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedAug 21

forecast

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment of Commerce

Contacts2 people available

OfficeN/A

Organization / Agency

Department of Commerce

Office AddressN/A

Contacts

AIJUN ZHANG

contact@example.gov

DOC OSDBU

contact@example.gov

Full Description

Show more

IT Security & Privacy Risk Management Framework (RMF)

Similar Contracts

Same NAICS industry code

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

about 3 hours ago

DEADLINE

Infrastructure and Database Performance Consultant

Secretary of State

POSTED

about 4 hours ago

DEADLINE

Texas Election Administration Management (TEAM) System Independent Technical Assessment

Solicitation # 3815

Solicitation Number 3815 is a Request for Proposal issued by the Texas Secretary of State for a six-week independent technical assessment of the Texas Election Administration Management (TEAM) system modernization project. The scope of work requires the selected contractor to evaluate technical architecture, code quality, infrastructure performance, database design, and alignment with statutory requirements, ultimately delivering a prioritized list of critical fixes and remediation strategies. The engagement begins from a kickoff date and may be extended at the sole discretion of the Secretary of State for further implementation support or oversight. Performance may be conducted remotely or on-site at provided SOS facilities. The contract will be awarded based on best value, with evaluation weights assigned as 40 percent to cost and financial proposals, 25 percent to technical methodology and RFP alignment, 25 percent to vendor experience and qualifications, and 10 percent to references and past history. Past performance is measured on a pass/fail basis via the Comptroller of Public Accounts Vendor Performance Tracking System. Proposals must be submitted electronically by November 23, 2026, and must include several required appendices, including a conflict of interest disclosure and a non-disclosure agreement. Contractors must adhere to strict compliance standards, including the SOS Prohibited Technology Policy, E-Verify usage, and Texas accessibility requirements under 1 T.A.C. Chapters 206 and 213. Insurance requirements include Commercial General Liability of 1 million dollars per occurrence and 2 million dollars aggregate, along with specific limits for workers compensation, employer liability, and automobile insurance. Payments are processed via reimbursement in accordance with the Texas Prompt Payment Act, with invoices due thirty calendar days after the receipt of service or a correct invoice.

Secretary of State

POSTED

about 4 hours ago

DEADLINE

Secure Data Handling and Reporting Services

Ministry of Environment and Parks

POSTED

about 4 hours ago

DEADLINE

Data Migration and IPAWS Integration SpecialistThis subcontract opportunity is for a Data Migration and IPAWS Integration Specialist to support prime contractors on Rhode Island Emergency Management Agency projects. The primary scope of work involves migrating recipient data from fragmented legacy protocols to a unified cloud platform and configuring various levels of effort for IPAWS integration. The selected provider will utilize specialized cloud migration tools and interfaces while maintaining strict adherence to PII and PHI security protocols to ensure the delivery of a functional integration and a migrated database. The project is associated with the State of Rhode Island under NAICS code 541512. Interested parties must submit their responses by the deadline of December 2, 2026. Further details regarding the bidding process can be accessed through the Rhode Island Division of Procurement portal.

State of Rhode Island

POSTED

about 7 hours ago

DEADLINE

CCRI One-Card Solutions

Solicitation # RFP27007117

The Community College of Rhode Island is soliciting proposals for a comprehensive one-card platform solution to enhance the user experience for students, faculty, and staff across its four main campuses in Warwick, Providence, Newport, and Lincoln, as well as satellite locations in Westerly and Woonsocket. The selected vendor will provide all necessary software, licenses, equipment, on-site installation, system integration, and training. Key technical requirements include support for Apple and Google Wallet mobile credentials, ADA-compliant self-service processes, and high-quality card production utilizing barcode, magnetic-stripe, and contactless technologies. The system must integrate with Banner SIS, Papercut, Micros/Aramark, and Barnes and Noble College, while maintaining compliance with FERPA, PCI, and various cybersecurity and data governance standards. Proposals are evaluated using a weighted point system totaling 106 points, covering technical qualifications, a work plan, an interview and demonstration, cost, and bonus points for Minority, Women, and Disability Business Enterprise participation. To advance through the evaluation phases, vendors must meet specific minimum score thresholds for the technical proposal and the combined technical and interview phases. The submission process requires a technical proposal limited to six pages, a detailed cost proposal, and a completed ISBE participation plan. The solicitation was posted on November 4, 2026, with a response deadline of December 4, 2026.

State of Rhode Island

POSTED

about 7 hours ago

DEADLINE

Education Data Coordinator & AnalystThe Education Data Coordinator and Analyst subcontract provides specialized data coordination and management services to prime contractors working on South Dakota Department of Education projects. The scope of work focuses on facilitating data sharing agreements between higher education institutions and state agencies, managing the collection and cleaning of longitudinal data, and monitoring key performance measures related to educator retention. Key deliverables for this engagement include executed data-sharing agreements, cleaned datasets, and the development of performance tracking dashboards. This opportunity is categorized under NAICS code 541512 and is associated with the South Dakota State Government, with a response deadline set for December 2, 2026.

South Dakota State Government

POSTED

about 7 hours ago

DEADLINE

Keyfactor Command Integration ConsultantThis subcontract opportunity is for a Keyfactor Command Integration Consultant to support prime contractors on projects for the California Employment Development Department. The selected consultant must be a Keyfactor certified professional responsible for integrating Keyfactor Command with network infrastructure. Key technical requirements include configuring the Palo Alto Universal Orchestrator extension, implementing KFUtil for automation, and developing and deploying Adoption Sets to streamline workflows. The primary deliverables for this engagement are a fully integrated Palo Alto Orchestrator and the implementation of functional automation workflows. Interested parties should note that the solicitation was posted on November 4, 2026, with a response deadline of November 18, 2026. The project falls under NAICS code 541512 and is managed through the California state procurement system.

California Employment Development Department

POSTED

about 8 hours ago

DEADLINE

PKI/EJBCA Implementation SpecialistThis subcontract opportunity for a PKI/EJBCA Implementation Specialist supports prime contractors working on projects for the California Employment Development Department. The primary objective is the provisioning, validation, and configuration of the EJBCA PKIaaS environment, specifically focusing on the LOBISSCA03 system. The scope of work includes the setup of additional Issuing EJBCA CAs and the configuration of critical enrollment use cases such as SCEP, ACME, EST, and Microsoft Intune SCEP. The successful contractor will be responsible for delivering a fully operational and validated PKI environment. This engagement falls under NAICS code 541512 and is associated with a response deadline of November 18, 2026. The final deliverable is a functional infrastructure that ensures secure and validated certificate enrollment protocols are in place for the agency.

California Employment Development Department

POSTED

about 8 hours ago

DEADLINE

EDD Request for Quote No. 133571 Public Key Infrastructure Digital Certificate Management System Services

Solicitation # 133571

The California Employment Development Department (EDD) is soliciting bids under RFQ No. 133571 for a 12-month deliverables-based contract to maintain and enhance its enterprise certificate lifecycle management and public key infrastructure capabilities. Utilizing Keyfactor Command and EJBCA PKIaaS, the scope includes maintaining the production hosted environment and implementing 2026-2027 enhancements such as Palo Alto Universal Orchestrator integration, SCEP/ACME enrollment use cases, Microsoft Intune SCEP, and workflow automation. The contract requires 99.99% uptime coverage and premium support, with all work performed remotely and a strict prohibition on offshoring. Award will be granted to the lowest responsible bidder based on the net bid price, with specific evaluation incentives available for certified Disabled Veteran Business Enterprises, Small Businesses, Microbusinesses, and Nonprofit Veteran Service Agencies. The contract is structured around defined deliverables rather than time-and-materials, requiring a Deliverable Expectations Document and a signed Deliverable Acceptance Document for each milestone to trigger payment. Invoicing is subject to a 10% state withholding per Public Contract Code 12112. Bidders must submit all required certifications, including those regarding debarment, civil rights, and lobbying, by November 18, 2026.

California Employment Development Department

POSTED

about 8 hours ago

DEADLINE

API Integration Services (SAP & GIS)This subcontract for API Integration Services involves performing technical integration between a Gazetteer SaaS platform and internal enterprise ecosystems for prime contractors working on Cadent Gas Limited projects. The scope of work focuses on developing secure, API-driven integrations to establish fully functional, bidirectional data flows between the platform and key systems, specifically SAP CX, SAP S/4 HANA, and Esri ArcGIS Enterprise. To ensure system security, all developments must adhere to strict token-based authentication protocols. The project is categorized under NAICS code 541512 and is managed by Cadent Gas Limited, with the primary objective of ensuring seamless data synchronization across the organization's SAP and GIS infrastructure.

Cadent Gas Limited

POSTED

about 9 hours ago

DEADLINE

System Monitoring & Software IntegrationThis subcontract for System Monitoring and Software Integration involves the supply and configuration of remote monitoring platforms for a rooftop solar installation in Bethesda, Maryland. The selected contractor will be responsible for installing the necessary hardware and software to track critical performance metrics, including energy production, capacity factor, and the variance between actual and projected output. Beyond technical installation, the scope of work includes configuring user access and automated notifications for agency personnel to ensure seamless oversight. The project concludes with the delivery of a fully operational monitoring platform and the provision of comprehensive training for staff. This effort is managed through Corporate Procurement Services for the state of Maryland.

Corporate Procurement Services

POSTED

about 10 hours ago

DEADLINE

in about 1 month

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS