Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

IT Security Compliance and NIST SP 800-171 Implementation

Active

Federal

Response Deadline07/31/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Energy → Ornl Ut-Battelle Llc-Doe ContractorView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Oak Ridge, TN, 37830, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 27

subcontract

Response DeadlineJul 31

Submission deadline

Response Deadline

07/31/2026, 06:00:00 PM UTCin 3 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Energy → Ornl Ut-Battelle Llc-Doe Contractor

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Energy → Ornl Ut-Battelle Llc-Doe Contractor

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implement and maintain IT security controls in compliance with NIST SP 800-171 and FIPS 140-2 for systems handling controlled unclassified information on DOE contracts.

Similar Contracts

Same NAICS industry code

Virtualization Consulting IDIQThe Port of Seattle is seeking a qualified technical services partner to conduct a comprehensive evaluation of its current virtualization platform, focusing on health, performance, security, and architectural integrity. The assessment will validate operational reliability, uncover potential risks, and identify opportunities for optimization while ensuring alignment with business goals, regulatory compliance, security standards, and infrastructure resiliency. The output will include a prioritized roadmap to guide future improvements and strategic investments in the virtualization environment. The contract is issued under the Virtualization Consulting IDIQ framework and is managed by the Port of Seattle’s ICT Enterprise Infrastructure Services team. Primary contact for inquiries is Carol Hassard, with Jim Dawson serving as Project Manager. The solicitation was posted on July 28, 2026, and falls under NAICS code 541512, indicating it is for computer systems design services. The work will be performed remotely or on-site as needed, with no specific location mandated, and all communication and documentation will be handled through the Port's official solicitation portal.

ICT Enterprise Infrastructure Services

POSTED

about 8 hours ago

DEADLINE

Azure Consulting IDIQThe Port of Seattle is preparing to engage a qualified cloud services partner through an IDIQ contract to advance its adoption and optimization of Microsoft Azure cloud and hybrid environments. The primary focus will be on evaluating and strengthening the existing Azure architecture, ensuring all new service deployments align with organizational standards, operational requirements, and long-term scalability goals. The contractor will play a pivotal role in enhancing cloud security, improving system resiliency, and guiding the modernization of infrastructure to support evolving business needs and technological advancements. This engagement requires deep expertise in Azure services, hybrid cloud environments, and enterprise-grade cloud governance. The partner will be expected to provide strategic guidance on architecture design, implementation best practices, and continuous optimization to maintain performance and compliance. All work will be performed in support of the Port of Seattle’s ICT Enterprise Infrastructure Services, with primary point of contact Carol Hassard and Project Manager Jim Dawson available for coordination. The solicitation is forecasted for release in 2026 under NAICS code 541512, which classifies the services under computer systems design and related activities.

ICT Enterprise Infrastructure Services

POSTED

about 8 hours ago

DEADLINE

FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is forecasting a software replacement initiative for the Flight Information Display System, aiming to modernize and enhance the digital infrastructure supporting passenger information across aviation terminals. The project is classified under NAICS code 541512, indicating it involves custom software development services, and is intended to deliver a fully functional, next-generation FIDS platform to improve accuracy, reliability, and user experience for travelers. The contract is currently in the forecast phase, with no solicitation number assigned yet, suggesting formal procurement activities are pending. Key point of contact for this initiative is Farlis Lewis, who serves as the primary Port Contact, and Krista Sadler, the Project Manager, who will oversee technical execution and vendor coordination. Both can be reached via provided phone numbers and email addresses for inquiries. There is no specified place of performance or set-aside type, meaning the work could be performed remotely or on-site at Port of Seattle facilities, and there are no restrictions on contractor eligibility based on small business or other set-asides. Interested parties should monitor the official portal link for upcoming solicitation details and submission requirements.

ICT Enterprise Infrastructure Services

POSTED

about 8 hours ago

DEADLINE

Investment Data Modernization Post-Implementation Technical ServicesThe Contractor will deliver functional and technical services to ensure the continued stability, performance, and enhancement of the SimCorp Dimension platform and its associated integrations as part of the Investment Data Modernization initiative. This includes ongoing support to maintain system reliability, address emerging technical issues, implement improvements, and facilitate seamless interactions between SimCorp Dimension and other critical systems. The services are aimed at sustaining and advancing the platform’s capabilities to meet the evolving needs of the Teacher Retirement System of Texas. This solicitation, designated as TRS000669, was posted on July 28, 2026, with a response deadline of August 25, 2026. It is issued by the Teacher Retirement System of Texas under the State and Local Government (SLED) category, with performance to occur within Texas. The primary point of contact for inquiries is Max Hernandez, reachable via email at max.hernandez@trs.texas.gov or by phone at 512-542-6620. Further details and submission instructions are available through the TX SmartBuy portal at the provided URL.

Teacher Retirement System of Texas

POSTED

about 14 hours ago

DEADLINE

Continuous Monitoring (ConMon) System IntegrationThe contract seeks a subcontractor to implement and maintain a Continuous Monitoring system for cloud environments, ensuring real-time security visibility and immediate reporting access for Utah DTS. The solution must be fully operational and integrated within two weeks of contract award, emphasizing speed, reliability, and seamless alignment with state security requirements. The work falls under NAICS code 541512, indicating it is centered on computer systems design and related services, specifically focused on cybersecurity monitoring and data analysis. Bidders must respond by August 17, 2026, and the opportunity is openly available without set-aside restrictions, allowing any qualified entity to compete. Performance will be carried out remotely to support Utah DTS, with no specific physical location mandated.

POSTED

about 20 hours ago

DEADLINE

Proprietary Software or Instrumentation SupportThe contract pertains to technical support, calibration services, and software licensing for scientific instruments and platforms that are integrated with QIAGEN products, covering both automated laboratory equipment and associated bioinformatics tools. This subcontract outlines the provision of ongoing maintenance and operational support necessary to ensure the reliability and accuracy of these high-precision systems in research and diagnostic settings. The scope includes timely troubleshooting, preventive maintenance, firmware and software updates, and adherence to industry calibration standards to maintain compliance and data integrity. This opportunity is classified under NAICS code 541512, indicating its focus on computer systems design and related services, and is posted by the state of Utah with a response deadline of August 3, 2026. While the specific agency office and point of contact details are not provided, the contract is accessible through the Utah BonfireHub platform. Potential vendors must be prepared to deliver comprehensive, sustained support services across a complex ecosystem of proprietary hardware and software, ensuring seamless integration and uninterrupted functionality for end users in scientific and clinical environments.

POSTED

about 20 hours ago

DEADLINE

Software Deployment and Integration Support ServicesDallas Area Rapid Transit is seeking a subcontractor to install, configure, and integrate AutoDesk and Revit software into its existing IT infrastructure, ensuring seamless compatibility and optimal system performance. The scope includes comprehensive system optimization, validation of software compatibility with current platforms, and successful integration to support operational workflows without disruption. This effort is critical to maintaining efficiency in DART’s design and engineering functions, requiring technical expertise in enterprise software deployment and infrastructure alignment. The opportunity is posted under NAICS code 541512 with a response deadline of August 4, 2026, and is structured as a subcontract under the Texas-based agency. All work must be performed in alignment with DART’s technical and operational standards, though specific location details for performance are not provided.

Dallas Area Rapid Transit

POSTED

about 22 hours ago

DEADLINE

IT Systems Implementation & Project ManagementThe contract entails the end-to-end implementation of a housing management solution, requiring full project management oversight from initial planning through to go-live support, all to be completed within 30 days of purchase order issuance. The scope includes critical phases such as data migration, system testing, user training, and post-deployment support, with an emphasis on seamless integration and timely delivery within a tight timeframe. The task is governed under a subcontract structure, classified under NAICS code 541512 for computer systems design services, and is issued by the University of Southern Mississippi through its Mississippi office. The solicitation was posted on July 27, 2026, with responses due by August 13, 2026, indicating a limited window for proposal submission. While no specific location for performance is detailed, the project is tied to the university’s internal systems and operations. There is no set-aside information provided, and no point of contact is listed, suggesting proposers must rely on the public portal for further details. The urgency of the 30-day implementation window underscores the need for an experienced vendor with proven capability in housing management systems and rapid deployment methodologies.

UNIVERSITY of SOUTHERN MISSISSIPPI

POSTED

about 23 hours ago

DEADLINE

CMMC Assessment & Cybersecurity ComplianceThis contract entails a CMMC Level 2 assessment and comprehensive cybersecurity system hardening to ensure full compliance with NIST SP 800-171 requirements. The scope includes a detailed audit of existing security controls, identification of gaps, and implementation of remediation measures to meet the necessary cyber hygiene standards. The contractor is responsible for achieving certification through a C3PAO accredited organization, ensuring that all assessed systems are properly documented, secure, and aligned with Department of Defense cybersecurity mandates. The contract is structured as a subcontract under a Total Small Business Set-Aside designation, reserved exclusively for small businesses as defined by the SBA. It is categorized under NAICS code 541512 for Computer Systems Design Services and is issued by the ASC Commodities Division within the Department of Defense. Proposals are due by August 7, 2026, with the solicitation published on July 27, 2026. The work may be performed remotely or at the contractor’s facility, with no specific physical location designated for performance, and the award will be managed under federal subcontracting guidelines applicable to defense-related cybersecurity services.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance & NIST SP 800-171 ImplementationThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 Rev 2 cybersecurity controls across systems that handle covered defense information, ensuring full compliance with federal protection standards. This includes conducting thorough assessments of current security postures, developing and managing Plans of Action and Milestones to address identified gaps, and establishing robust incident reporting procedures to meet mandated timelines and requirements. All activities must be performed in alignment with the stringent security framework outlined in NIST SP 800-171 Rev 2, with continuous monitoring and documentation to demonstrate adherence. This is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with a NAICS code of 541512 indicating it pertains to computer systems design services. The solicitation was posted on July 27, 2026, and responses are due by August 27, 2026. The place of performance is not specified, but the work must support Defense Information systems, and all compliance activities must be executed regardless of location. The contract emphasizes sustained operational security, formal documentation, and accountability through structured remediation efforts and timely incident response.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

CMMC Compliance and Cybersecurity SupportThe contract requires full achievement and documentation of CMMC compliance for systems handling FCI and CUI, with strict alignment to NIST SP 800-171 security requirements. This includes implementing all necessary controls, conducting internal assessments, and formally submitting CMMC UIDs through the SPRS system to validate compliance status. The work must be executed under a subcontract structure, with performance tied to defense-related cybersecurity standards set by the Department of Defense. All activities must be completed and documented prior to the response deadline of August 7, 2026, under the NAICS code 541512 for computer systems design services. Compliance is not optional; it is a mandatory condition for contract execution and must be verifiable through official documentation and submission pathways.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Technical Documentation and Equivalency Testing SupportThe contract requires the development of detailed technical documentation and comprehensive test results to demonstrate functional equivalency to PageDNA, a specific software platform. This includes conducting thorough feature-by-feature comparisons and validating integration capabilities to ensure the proposed solution matches or exceeds PageDNA’s established functionality across all critical operational areas. The deliverables must clearly articulate how the solution performs in real-world scenarios, with testing outcomes that substantiate equivalence in performance, reliability, and compatibility. This is a subcontract opportunity issued by Broward County in Florida, with a solicitation posted on July 27, 2026, and responses due by August 3, 2026. It falls under NAICS code 541512, which categorizes it as Computer Systems Design and Related Services, indicating the work centers on technical design, analysis, and validation rather than hardware or general consulting. The place of performance and point of contact details are unspecified, and there is no set-aside designation for small or disadvantaged businesses. Interested parties must submit their proposals through the BonfireHub portal by the stated deadline.

POSTED

DEADLINE

More opportunities from Department Of Energy → Ornl Ut-Battelle Llc-Doe Contractor

Same awarding agency

Biobased Product Reporting and Compliance

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Facility Condition Assessments and CMMS Data Management

Environmental Consulting Services

POSTED

DEADLINE

Supply and Installation of Temperature-Compensating Circulators

Analytical Laboratory Instrument Manufacturing

POSTED

DEADLINE

Supply of Shielded Sensor and Coil Cables

POSTED

DEADLINE

Insurance & Liability ServicesThe contract requires the provision of commercial general liability insurance with a $2 million aggregate limit and professional liability errors and omissions coverage that meet the specific requirements set by the Department of Energy through its contractor, Oak Ridge National Laboratory under UT-Battelle LLC. The insurance must be maintained in full compliance with DOE standards to ensure adequate protection against third-party claims, property damage, bodily injury, and professional negligence related to services performed under the subcontract. The solicitation is open for responses with a strict deadline of July 31, 2026, at 6:00 PM, and the work is to be performed at the designated location in Oak Ridge, Tennessee, with the NAICS code 524211 indicating the classification under Insurance Carriers and Related Activities. All bidders must ensure their proposed insurance policies are actively issued, properly documented, and capable of satisfying federal contract obligations without modification or exclusion relevant to DOE policies.

POSTED

DEADLINE

Subcontractor Compliance & Flow-Down ManagementSubcontractors must fully comply with all federal and Department of Energy-specific contractual clauses, with a strong emphasis on the mandatory flow-down of safety, security, and data protection requirements to all tiers of subcontracted work. This includes implementing and enforcing protocols that align with DOE standards for handling sensitive information, safeguarding physical and cyber assets, and ensuring personnel are trained and certified in accordance with federal regulations. The contract applies to work performed at the Oak Ridge location, with a strict deadline for responses by July 31, 2026, and is classified under NAICS code 541611, indicating it pertains to management consulting services supporting federal operations. The contracting entity is Oak Ridge National Laboratory under its contractor, UT-Battelle LLC, operating under the Department of Energy’s oversight.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Electrical Equipment Safety & NRTL ComplianceThe contract seeks qualified vendors to supply or evaluate electrical equipment that requires National Recognized Testing Laboratory (NRTL) listing or field evaluation, such as UL or ETL certification, with full compliance documentation for deployment at U.S. Department of Energy facilities. The scope encompasses ensuring all equipment meets rigorous safety standards and includes documentation verifying adherence to applicable codes and regulations, with performance focused on equipment used within the Oak Ridge, Tennessee location. This subcontract is issued by ORNL UT-Battelle LLC, a Department of Energy contractor, and is governed under NAICS code 335313 for electrical equipment manufacturing. Responses are due by July 31, 2026, at 6:00 PM Eastern Time, following a public posting on July 27, 2026. The contract requires strict compliance with NRTL standards and mandates that all submitted equipment be accompanied by verifiable certification records to confirm safety and regulatory alignment for use in federal energy operations.

Switchgear and Switchboard Apparatus Manufacturing

POSTED

DEADLINE

NIST SP 800-171 & Data Protection ImplementationThe contract requires the implementation and ongoing maintenance of robust cybersecurity measures to protect controlled unclassified information in compliance with NIST SP 800-171 and FIPS 140-2 standards. The work is focused on ensuring that all systems handling CUI meet federal security requirements, including access controls, encryption, audit logging, and configuration management, to safeguard sensitive but unclassified data from unauthorized access or disclosure. The scope involves both initial deployment and continuous monitoring of safeguards, with an emphasis on maintaining continuous compliance through regular assessments and remediation of identified gaps. This subcontract is positioned under NAICS code 541512 for computer systems design services and is tied to the Department of Energy through its contractor, Oak Ridge-related entity, with performance occurring in Oak Ridge, Tennessee, ZIP 37830. The opportunity was posted on July 27, 2026, and responses are due by July 31, 2026, indicating a narrow window for proposal submission. While no set-aside status or point of contact is specified, the place of performance and agency affiliation underscore the critical nature of the work within a high-security federal environment, where adherence to stringent cryptographic and information protection protocols is non-negotiable.

Computer Systems Design Services

POSTED

DEADLINE

Classified Information Security & Access ComplianceThis contract pertains to the vetting and authorization of support personnel who will handle classified information under the strict compliance requirements of DOE Order 472.2 and applicable NIST standards. The work involves ensuring all individuals granted access to classified materials undergo thorough background screenings, security clearances, and ongoing compliance monitoring to meet federal safeguards for sensitive information. The effort is centered on maintaining the integrity and confidentiality of classified data throughout its lifecycle within the designated work environment. The subcontract is issued by Oak Ridge National Laboratory under the Department of Energy and is performance-bound to Oak Ridge, Tennessee, with a response deadline of July 31, 2026. It falls under NAICS code 541612 for management, scientific, and technical consulting services, indicating a focus on advisory and compliance-driven support rather than direct operational duties. The solicitation is open to eligible subcontractors capable of providing security vetting infrastructure and processes aligned with federal nuclear and national security protocols, with all activities required to adhere to the highest levels of information security discipline as mandated by the Department of Energy.

Human Resources Consulting Services

POSTED

DEADLINE

Hazardous Energy Control Program Development & ImplementationThe contract seeks the development and implementation of a comprehensive hazardous energy control program aligned with OSHA 10 CFR 851.23 and NFPA 70E standards, specifically tailored for high-hazard environments within U.S. Department of Energy facilities. The program must establish robust lockout/tagout procedures to ensure worker safety during maintenance and servicing of equipment, addressing all energy sources including electrical, mechanical, hydraulic, pneumatic, chemical, and thermal. Execution will require detailed risk assessments, training protocols, documentation systems, and audit mechanisms to maintain compliance and foster a culture of safety in high-risk operational settings. This subcontract is issued by ORNL UT-Battelle LLC, a DOE contractor, with performance strictly limited to Oak Ridge, Tennessee, at 37830. The solicitation was posted on July 27, 2026, with a response deadline of July 31, 2026, indicating a rapid procurement timeline. The North American Industry Classification System code 541611 identifies the work as management, scientific, and technical consulting services, underscoring the need for specialized expertise in industrial safety systems. Successful bidders must demonstrate proven experience in deploying energy control programs in federal or high-hazard facilities and be prepared to integrate seamlessly with existing DOE safety frameworks while exceeding minimum regulatory requirements.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Small Business Subcontracting Participation OpportunitySmall, disadvantaged, veteran-owned, and women-owned businesses are invited to participate as subcontractors under a mandatory subcontracting plan for a Department of Energy contract awarded to ORNL UT-Battelle LLC, a DOE contractor. This opportunity applies to contracts valued above $750,000 for services or $1.5 million for manufacturing, with the North American Industry Classification System code 335999 indicating a focus on other electrical equipment and component manufacturing. The place of performance is in Oak Ridge, Tennessee, with a zip code of 37830. Interested businesses must submit their participation proposals by the deadline of July 31, 2026, at 6:00 PM Eastern Time, following the posting date of July 27, 2026. Participation requires alignment with federal subcontracting goals aimed at increasing opportunities for underrepresented business categories under prime contracts managed by the Department of Energy.

All Other Miscellaneous Electrical Equipment and Component Manufacturing

POSTED

DEADLINE

CUI Protection and NIST SP 800-171 Compliance ServicesThe contract requires the implementation and maintenance of cybersecurity controls to protect Controlled Unclassified Information in accordance with NIST SP 800-171 and DFARS requirements. The work is focused on securing systems that handle sensitive but unclassified data, ensuring compliance with federal cybersecurity standards through technical measures, policy enforcement, and ongoing monitoring. The scope encompasses all necessary activities to assess, install, validate, and sustain controls that meet the specified frameworks, with an emphasis on continuous compliance and risk mitigation. The contract is a subcontract under the Department of Energy, managed by Oak Ridge-related entity UT-Battelle LLC, with performance located in Oak Ridge, Tennessee, zip code 37830. The North American Industry Classification System code is 541512, indicating information technology services. The solicitation was posted on July 27, 2026, with a firm response deadline of July 31, 2026, at 6:00 PM. No set-aside type is specified, and the work is expected to be performed by a contractor meeting the technical and compliance requirements outlined in the solicitation.

Computer Systems Design Services

POSTED

DEADLINE