Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →
CLEATUS
Get CLEATUS

IT Security Assessment and Authorization (A&A) Services

Active
International

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for IT Security Assessment and Authorization services supports the Department of Public Safety and Emergency Preparedness in the National Capital Region. The primary objective is to perform security assessments and manage the Authorization to Operate process for prime contractors on various IT projects. Key responsibilities include developing security assessment plans, conducting Threat and Risk Assessments, and creating control matrices and Plans of Action and Milestones. The contract requires specialized personnel categorized as TBIPS C.3 Analysts at Levels 2 and 3, who must hold professional certifications such as CISSP, CISM, CISA, CRISC, or CCSP. Deliverables for this engagement include complete ATO decision packages, Security Assessment Reports, and Residual Risk Summaries. The solicitation was posted on October 20, 2026, with a response deadline of November 23, 2026.

General Info

IT security assessment and ATO services for Department of Public Safety and Emergency Preparedness.

Agency

Government of Canada → Department of Public Safety and Emergency Preparedness

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

National Capital Region (NCR), CAN

Set-Aside

NONE

Documents

This scope was carved out of 202703271.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

IT Security Professional Services Under the Task-Based Services Supply Arrangement

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyGovernment of Canada → Department of Public Safety and Emergency Preparedness
ContactsNo contacts available
OfficeN/A
Organization / AgencyGovernment of Canada → Department of Public Safety and Emergency Preparedness
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Performs security assessments and manages the Authorization to Operate (ATO) process for prime contractors on Public Safety Canada IT projects. Develops security assessment plans, conducts Threat and Risk Assessments (TRA), and creates control matrices and POAMs. Requires TBIPS C.3 Analyst (Levels 2 & 3) with CISSP, CISM, CISA, CRISC, or CCSP certifications. Delivers complete ATO decision packages, Security Assessment Reports, and Residual Risk Summaries.

Similar Contracts

Same NAICS industry code

NAICS: 541690
New
DBE Subconsultant Opportunity – AARC Consultants
Solicitation # dbe-subconsultant-opportunity-aarc-consultants
AARC Consultants, LLC

POSTED

about 6 hours ago

DEADLINE

in 26 days
View Details
NAICS: 541690
New
SLED
Cybersecurity & Data Privacy ComplianceThis subcontract opportunity with the City of Augusta in Georgia focuses on providing cybersecurity audits and data privacy compliance for prime contractors involved in the city's fuel card program projects. The selected provider will be responsible for implementing rigorous data security protocols and ensuring all operations adhere to financial data standards, specifically PCI DSS. Key deliverables include the creation of comprehensive cybersecurity and fraud prevention documentation and the maintenance of a secure data environment. Interested parties should note the response deadline of November 12, 2026, and the classification of the work under NAICS code 541690.
City of Augusta

POSTED

about 12 hours ago

DEADLINE

in 22 days
View Details
NAICS: 541690
New
SLED
GRC Security and Compliance AuditorThe GRC Security and Compliance Auditor subcontract for the Texas State Technical College System focuses on providing critical security monitoring and compliance auditing for prime contractors. The scope of work includes managing encryption, access controls, and vulnerability management, while ensuring strict adherence to FERPA, TX-RAMP, and TAC 206/213 regulations. Additionally, the contractor is responsible for developing disaster recovery and business continuity plans through the use of audit logging tools and vulnerability scanners, ultimately delivering comprehensive security audit reports and compliance certifications. This opportunity is categorized under NAICS code 541690 and was posted on October 20, 2026. Interested parties must submit their responses by the deadline of November 10, 2026. The contract is managed through the Texas State Technical College System and is listed on the Texas SmartBuy portal.
Texas State Technical College System

POSTED

about 16 hours ago

DEADLINE

in 20 days
View Details
NAICS: 541690
New
SLED
Demographic Analyst / LEP SpecialistThis subcontract opportunity for a Demographic Analyst / LEP Specialist supports the City of Fairfax Title VI Program in Virginia. The selected contractor will be responsible for analyzing population data for prime contractors, specifically reviewing and updating demographic and language information. By utilizing U.S. Census Bureau and American Community Survey datasets along with specialized data analysis software, the contractor will perform Limited English Proficiency assessments and identify key outreach populations. The primary deliverables for this engagement include updated demographic profiles and comprehensive LEP assessment reports. Interested parties should note that the solicitation was posted on October 20, 2026, with a response deadline of November 10, 2026. The work falls under NAICS code 541690 and will be performed within the City of Fairfax.
City of Fairfax

POSTED

about 20 hours ago

DEADLINE

in 20 days
View Details
NAICS: 541690
New
International
Medical Equipment Asset AuditorThe Medical Equipment Asset Auditor subcontract involves performing physical and digital audits of existing medical equipment for prime contractors working on Frimley Health NHS Foundation Trust projects. The primary objective is to verify the condition, age, and technical specifications of assets to ensure they align with new hospital design requirements. This process requires the use of asset tagging and valuation tools to produce a detailed Inventory List and a Comprehensive Asset Audit Report. Qualified candidates must hold certification in Clinical Engineering or Health Technical Memoranda. The opportunity was posted on October 20, 2026, with a response deadline of November 16, 2026. This engagement falls under NAICS code 541690 and is specifically designed to support the infrastructure and equipment mapping needs of the Frimley Health NHS Foundation Trust.
Frimley Health NHS Foundation Trust

POSTED

about 20 hours ago

DEADLINE

in 26 days
View Details
NAICS: 541690
New
International
Archaeological Technical Support & ReportingThis subcontract for Archaeological Technical Support and Reporting involves providing administrative and technical assistance to prime contractors working on City of Delta infrastructure projects. The selected provider will be responsible for drafting Archaeological Overview Assessments and Preliminary Field Reconnaissance reports, as well as preparing documentation for Site Alteration Permits and Multi Assessment Permits. A critical component of the role includes coordinating with the Provincial Archaeology Branch and ensuring all work complies with the Heritage Conservation Act. The contract requires the delivery of completed permit applications and final archaeological reports. Interested parties should note that the response deadline is November 16, 2026. The project falls under NAICS code 541690 and is associated with the City of Delta and the Province of British Columbia.
City of Delta

POSTED

about 20 hours ago

DEADLINE

in 26 days
View Details
NAICS: 541690
New
International
Archaeology Consulting Services
Solicitation # 26-122
The City of Delta is issuing solicitation 26-122 to establish a shortlist of qualified archaeology firms to provide professional consulting services on an as-and-when-requested basis. The scope of work includes archaeological investigation, monitoring, reporting, and permitting for various infrastructure and development projects, such as road upgrades and utility replacements, within the City of Delta. All services must comply with the Heritage Conservation Act, and firms must demonstrate eligibility to hold provincial permits, including Multi Assessment Permits and Site Alteration Permits. Key deliverables involve field assessments, coordination with the Provincial Archaeology Branch and First Nations, and the provision of heritage management training for City staff. The selection process utilizes a two-stage qualification method. To be considered, respondents must meet all mandatory criteria, including the timely submission of a signed Proposal Covering Letter. Qualified firms will be evaluated based on proponent capability and experience (50%), methodology (25%), and fees (25%), with minimum scores required for the first two categories. The City emphasizes the importance of professional certification, requiring at least one team member to be in good standing with a recognized organization like the British Columbia Association of Professional Archaeologists. Preference is given to consulting team members with five years of experience and lead archaeologists with ten years of experience. The resulting shortlist will remain valid until January 1, 2025, or for three years from the closing date. Once the list is established, the City will invite these qualified respondents to submit firm-priced tenders for specific projects. Proposals must be submitted as a single PDF to the purchasing department by 2:00 PM Pacific time on November 16, 2026. The pricing structure for the qualification stage includes hourly rates for principal archaeologists, field directors, technicians, and support staff, as well as lump sum rates for permit applications.
City of Delta

POSTED

about 20 hours ago

DEADLINE

in 26 days
View Details
NAICS: 541690
New
SLED
Fare Revenue Modeling and Impact AnalystThis subcontract for a Fare Revenue Modeling and Impact Analyst involves providing specialized financial and ridership forecasting models for prime contractors working on Santa Clara Valley Transportation Authority projects. The scope of work includes developing revenue models for proposed fare structures, evaluating ridership elasticity, and utilizing transit demand modeling software to analyze the financial effects of changes to fare media. The primary deliverable for this engagement is the Revenue and Ridership Impact Analysis Report along with the associated models. This opportunity is categorized under NAICS code 541690 and is managed through the Finance agency in California, with a response deadline set for November 17, 2026.
Finance

POSTED

about 23 hours ago

DEADLINE

in 27 days
View Details
NAICS: 541690
New
Federal
Water Security & International Water GovernanceThis subcontract opportunity with W4LD USA Hecsa under the Department of Defense focuses on providing specialized expertise in water security and Integrated Water Resources Management for USACE projects both domestically and internationally. The selected provider will be responsible for addressing complex water policy issues, mitigating trans-boundary water conflicts, and developing governance frameworks and policy recommendations. Success in this role requires a proven track record of collaborating with high-level entities, including the U.S. State Department, the United Nations, and various non-governmental organizations. Candidates must possess significant experience working with international institutions and a demonstrated ability to support multi-national force capacity development. The contract falls under NAICS code 541690, with a response deadline set for November 6, 2026. This engagement is designed to integrate technical water management expertise with diplomatic and strategic policy guidance to ensure water security across diverse global operational environments.
W4LD USA Hecsa

POSTED

1 day ago

DEADLINE

in 16 days
View Details
NAICS: 541690
New
Federal
Economic & Socio-Economic AnalysisThis subcontract opportunity with W4LD USA Hecsa under the Department of Defense focuses on providing comprehensive economic and socio-economic analysis for USACE water resources projects. The scope of work involves performing project, regional, and national-level economic assessments, including Benefit-Cost Analysis, Value-to-the-Nation assessments, and financial analysis of public works infrastructure. The selected provider will utilize multi-criteria and risk-informed economic analysis to deliver critical financial feasibility studies and economic impact reports. The requirement is categorized under NAICS code 541690. Interested parties should note that the solicitation was posted on October 20, 2026, with a response deadline of November 6, 2026.
W4LD USA Hecsa

POSTED

1 day ago

DEADLINE

in 16 days
View Details
NAICS: 541690
New
Federal
Safety & Security Specialized SupportThis subcontract opportunity, titled Safety and Security Specialized Support, is issued by the Department of Defense for the W074 Endist Wilmington. The contract focuses on providing specialized technical support and advisory services regarding safety and security protocols for prime contractors. Key deliverables include the performance of safety assessments and the production of security advisory reports to ensure site compliance using non-A&E methods. The project is designated as a total Small Business Set Aside under NAICS code 541690. Performance of the work will take place in the 28403 zip code area. This engagement is specifically designed to bolster the safety and security infrastructure of USACE Endist Wilmington projects through expert technical guidance.
W074 Endist Wilmington

POSTED

1 day ago

DEADLINE

N/A
View Details
NAICS: 541690
New
Federal
VA Healthcare Cybersecurity Compliance & ATO SupportThe VA Healthcare Cybersecurity Compliance and ATO Support subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on providing critical security assessments and Authorization to Operate documentation for prime contractors managing healthcare IT projects. The scope of work includes conducting penetration testing, validating IPv6-Only environment capabilities, and generating Software Bill of Materials in NTIA format. To ensure rigorous security standards, the contractor must maintain compliance with HIPAA, FIPS 140-2/3, and NIST SP 800-66 Rev. 2. Key deliverables for this engagement include comprehensive security assessment reports, completed ATO documentation, and the required SBOM. This opportunity falls under NAICS code 541690 and requires responses by October 27, 2026.
Technology Acquisition Center Nj (36C10B)

POSTED

1 day ago

DEADLINE

in 6 days
View Details

More opportunities from Government of Canada → Department of Public Safety and Emergency Preparedness

Same awarding agency

NAICS: 541519
New
International
Vulnerability Assessment and Penetration Testing (VAPT) ServicesThis subcontract for Vulnerability Assessment and Penetration Testing services supports prime contractors on projects for the Government of Canada's Department of Public Safety and Emergency Preparedness. The selected provider will perform authorized vulnerability assessments and penetration tests on specified targets within the National Capital Region, adhering to strict Rules of Engagement. Key deliverables include Executive Technical Reports, Technical Findings Registers, and Remediation-Validation Reports, all featuring risk-ranked remediation plans supported by reproducible evidence. To qualify, the service provider must supply a TBIPS C.11 VA Specialist at Level 3 who holds professional certifications such as OSCP or GIAC. The solicitation was posted on October 20, 2026, with a response deadline of November 23, 2026. The contract falls under NAICS code 541519 and focuses on enhancing the security posture of public safety infrastructure through rigorous technical testing and validation.
Other Computer Related Services

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
NAICS: 541512
New
International
Cybersecurity Architecture and Design ServicesThis subcontract for Cybersecurity Architecture and Design Services supports prime contractors on projects for the Government of Canada's Department of Public Safety and Emergency Preparedness. The scope of work involves producing security architectures and design-review deliverables, which include analyzing solution boundaries and data flows, performing threat modeling, and creating secure design patterns for network segmentation, identity, and access. Key deliverables for this engagement are Design Review Reports and Security Architecture Diagrams. Performance will take place in the National Capital Region. Qualified candidates must hold TBIPS C.7 Design Specialist Level 3 or C.8 Network Security Analyst Level 2 or 3 certifications, along with a CISSP or CISM designation. The solicitation was posted on October 20, 2026, with a response deadline of November 23, 2026.
Computer Systems Design Services

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
New
International
IT Security Professional Services Under the Task-Based Services Supply Arrangement
Solicitation # 202703271
Public Safety Canada is soliciting task-based IT professional services under the Task-Based Informatics Professional Services Supply Arrangement to support security assessments, authorizations, architecture, testing, remediation validation, and incident readiness for departmental systems, cloud services, and networks. The scope includes delivering up to 30 Authorization to Operate packages, producing security architectures and design reviews, and performing vulnerability assessments and penetration testing. The contract is awarded based on a combined rating of 70 percent technical merit and 30 percent price, with a focus on the depth of experience in security controls and the breadth of accepted deliverables. The contract follows an as-and-when-requested structure using Task Authorizations to define specific scopes, schedules, and deliverables. The initial term runs from the date of award to March 31, 2027, with two irrevocable one-year extension options. Services are priced as all-inclusive per diem rates based on TBIPS categories, including IT Security TRA and C&A Analysts, Design Specialists, Network Security Analysts, and Incident Management Specialists. The contractor must maintain a valid organization security clearance, adhere to a strict non-disclosure agreement, and provide resources with industry-recognized certifications such as CISSP, CISM, or OSCP. Performance is measured against baseline criteria for completeness, accuracy, traceability, and timeliness, with Public Safety Canada serving as the final authority for the acceptance or rejection of deliverables.

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
NAICS: 541611
New
International
IM/IT Research and Advisory Services for Public Safety Canada
Solicitation # 202701950
Public Safety Canada is soliciting proposals for IM/IT Research and Advisory Services to support its Digital Modernization and Public Safety Transformation Agenda. The objective is to secure subscription-based access to independent, evidence-based research, assessment tools, and advisory services focusing on artificial intelligence, cybersecurity, data management, and operational effectiveness. This opportunity is restricted to specific Supply Arrangement holders, including Forrester Research Limited, Info-Tech Research Group Inc., and Gartner Canada Co. The contract is for an initial term of one year with an option to extend for an additional year, for a maximum duration of two years. Services will be delivered via a secure online platform with a target uptime of 99 percent and a tiered support model catering to executive, management, and operational levels. Mandatory requirements for bidders include providing access to at least 150 full-time IT subject matter experts, maintaining independent and unbiased research, and demonstrating formal data protection policies. Award selection is based on the highest combined rating of technical merit, weighted at 80 percent, and financial price, weighted at 20 percent, with a minimum technical threshold of 70 percent required for consideration. The contractor must ensure that 80 percent of research content is less than 18 months old and acknowledge advisory requests within two business days. Key administrative requirements include the submission of a Quality Management Plan within 15 business days of award and adherence to the Privacy Act. Payments will be made via direct deposit within 30 days of receiving an undisputed invoice. There are no security requirements associated with this contract, and the contractor will retain intellectual property rights to foreground information.
Administrative Management and General Management Consulting Services

POSTED

1 day ago

DEADLINE

in 14 days
View Details
NAICS: 519290
New
International
IM/IT Content Development and CurationThis subcontract for IM/IT Content Development and Curation supports the Department of Public Safety and Emergency Preparedness within the National Capital Region. The selected provider will perform research and technical writing for prime contractors on digital domain projects, focusing on authoring new content and updating existing research on emerging technologies. To maintain data currency, all information must be less than 18 months old, with work managed through proprietary CMS and research databases. Qualified candidates must possess advanced degrees in Computer Science, Information Management, or Public Policy. Key deliverables include the production of research papers and the submission of quarterly content update reports. The solicitation was posted on October 15, 2026, with a response deadline of November 4, 2026.
Web Search Portals and All Other Information Services

POSTED

6 days ago

DEADLINE

in 14 days
View Details
NAICS: 541513
New
International
Research Platform Availability and Technical SupportThis subcontract for Research Platform Availability and Technical Support involves providing technical infrastructure management for prime contractors working on Public Safety Canada research platforms. The service provider is responsible for maintaining a 99% platform uptime, managing scheduled maintenance, and resolving functionality or access issues through cloud hosting environments and ticketing systems. Adherence to ITIL or equivalent service management standards is required, with deliverables including detailed resolution logs and uptime reports. The contract is issued by the Department of Public Safety and Emergency Preparedness for the Government of Canada, with performance taking place in the National Capital Region. Interested parties must respond by November 4, 2026, regarding this opportunity which falls under NAICS code 541513.
Computer Facilities Management Services

POSTED

6 days ago

DEADLINE

in 14 days
View Details
NAICS: 541611
New
International
Specialized Digital Transformation Advisory ServicesThe Specialized Digital Transformation Advisory Services subcontract supports prime contractors on digital modernization projects for the Government of Canada's Department of Public Safety and Emergency Preparedness. Based in the National Capital Region, the scope of work involves providing expert analysis on AI-driven solutions, conducting operational effectiveness diagnostics, and developing strategic risk mitigation plans focused on data management and cybersecurity. Qualified providers must hold industry-recognized certifications such as CISSP, CISM, or specialized credentials in AI and Data Management to deliver actionable advisory reports and strategic recommendations. The solicitation was posted on October 15, 2026, with a response deadline of November 4, 2026, falling under NAICS code 541611.
Administrative Management and General Management Consulting Services

POSTED

6 days ago

DEADLINE

in 14 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS