Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →
logo
Get CLEATUS

IT Strategic Plan Development & Vendor Procurement

Active
RFQ033297State & Local

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

Columbus Water & Power is seeking a qualified consultant to develop a comprehensive IT Strategic Plan that aligns with its mission to deliver essential public services including water, wastewater, and power. The plan must address current operational challenges while preparing for future technological needs, ensuring reliability, resilience, and robust cybersecurity across all critical infrastructure systems. The consultant will be responsible for creating a forward-looking framework that integrates technology governance, investment planning, lifecycle management, and innovation adoption, with a strong emphasis on aligning IT capabilities with business priorities across multiple divisions. The initiative aims to enable sustainable, scalable, and measurable progress in technology deployment while maintaining adaptability to evolving regulatory, operational, and industry demands. Proposals must be submitted exclusively through the Bonfire portal by 1:00 PM Eastern Time on August 21, 2026, with no hard copies or emails accepted. Questions regarding the solicitation must be submitted in writing to DPUCapitalRFP@columbus.gov by August 10, 2026, and responses will be published as addenda on the same portal. The solicitation number is RFQ033297, and the place of performance is Columbus, Ohio. The selected consultant must demonstrate proven expertise in strategic IT planning within public utility environments, providing actionable recommendations that support long-term growth, operational continuity, and technological advancement in alignment with organizational goals.

General Info

Columbus Water & Power seeks IT strategic plan consultant for utility infrastructure, cybersecurity, and tech alignment by August 21, 2026.

Agency

Ohio → CWPView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

37 W Broad St, Columbus, OH, 43215, USA

Set-Aside

NONE

Documents

(1)

RFP Advertisement IT Strategic Plan

OCTET-STREAM

AI Contract Breakdown

Uniform Contract Format

What is UCF?

Uniform Contract Format (UCF) uses AI to break down any contract into standardized sections—scope, pricing, deliverables, and evaluation criteria.

Timeline

PhaseSolicitation
Posted

Solicitation

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyOhio → CWP
Contacts1 person available
OfficeN/A
Organization / Agency
Ohio → CWP
View Agency Profile
Office AddressN/A
Contacts
contact@example.gov

Full Description

Show more
The purpose of this Request for Proposals (RFP) is to engage a qualified consultant to assist Columbus Water & Power (CWP) in developing a comprehensive Information Technology (IT) Strategic Plan that aligns with the organization’s mission, operational responsibilities, and long-term service objectives. CWP operates within a complex and highly critical environment that supports essential public services, including water, wastewater, and power operations. These services rely on a wide range of technologies and systems that must remain reliable, secure, and adaptable to changing operational and regulatory demands. As technology continues to evolve, CWP must ensure that its IT environment can effectively support both current operations and future needs across all divisions. The IT Strategic Plan will serve as a guiding framework to: • Address operational challenges and improve service delivery across the organization • Support the diverse and evolving technology needs of multiple divisions and business units • Enhance reliability, resiliency, and cybersecurity for systems supporting critical operations • Provide a structured approach to technology governance, technology planning, investment, and lifecycle management • Enable the organization to evaluate and adopt emerging technologies, innovation opportunities, and industry best practices • Strengthening alignment between IT capabilities and business priorities CWP is seeking a plan that not only reflects the current technology landscape but also provides flexibility to accommodate future growth, innovation, and changing business requirements. While the plan is expected to establish a multi-year direction, the City encourages consultants to recommend an approach that supports ongoing adaptability and continuous improvement. The selected consultant is expected to bring industry expertise, strategic insight, and practical recommendations that will help CWP advance its technological environment in a manner that is sustainable, scalable, executable, measurable, and aligned with organizational goals. 1.1 Scope: The City of Columbus, Department of Public Utilities, is receiving proposals until 8/21/26 at 1:00 PM Eastern Time for professional services for the IT Strategic Plan Development & Vendor Procurement project. Proposals are to be submitted only through Bonfire at https://columbus.bonfirehub.com/login. Hard copies or emails will not be accepted. All questions concerning this RFP are to reference the project name and be sent to DPUCapitalRFP@columbus.gov. No phone calls concerning questions about the RFP will be accepted. The last day to submit questions is 8/10/26. Responses will be posted on Bonfire at https://columbus.bonfirehub.com/login as an addendum.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
DIBBS
Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.
CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 8 hours ago

DEADLINE

in 11 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information within contractor systems that handle classified or sensitive contract data. This effort is mandatory for ensuring compliance with federal cybersecurity standards applicable to defense contractors and involves a full assessment and record-keeping of all required security controls across systems processing protected information. The work must be completed in alignment with the NIST framework and demonstrated through formal documentation to meet contractual obligations. The contract is classified as a subcontract under the NAICS code 541512, associated with computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense with performance required in Tracy, California, 95304-5000. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a tight turnaround for submission. Although no set-aside type is specified, the contract is governed by DoD cybersecurity regulations and demands strict adherence to NIST guidelines to protect national defense information, making compliance non-negotiable for award consideration.
ASC COMMODITIES DIVISION

POSTED

about 8 hours ago

DEADLINE

in 8 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance & NIST 800-171 AssessmentThe contract requires the performance of NIST SP 800-171 cybersecurity assessments to ensure systems handling Covered Defense Information meet federal security requirements. The effort focuses on evaluating compliance with the specified framework, identifying gaps, and implementing necessary safeguards to protect sensitive data. All assessment outcomes must be documented and submitted through the Supplier Performance Risk System to validate adherence to contractual and regulatory obligations. The work is tied to a subcontract under the Department of Defense and is to be performed at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026, under the NAICS code 541512, indicating it pertains to computer systems design services. There is no set-aside designation specified, and the contract does not include a designated point of contact within the provided details.
ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 8 hours ago

DEADLINE

in 8 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance and Reporting (Subcontractor Support)This contract requires subcontractor support to ensure compliance with NIST SP 800-171 standards for protecting covered defense information, while also mandating timely reporting of any cyber incidents in accordance with DFARS 252.204-7012. The work involves implementing and maintaining security controls aligned with federal cybersecurity requirements to safeguard sensitive data handled by the subcontractor on behalf of the Department of Defense. Performance is expected to be conducted at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response submission set for August 17, 2026. The solicitation falls under NAICS code 541512, indicating it is focused on computer systems design services, and is issued under the ASC SUPPLIER OPER OEM DIVISION, with no set-aside classification specified. The subcontractor must be prepared to demonstrate robust cybersecurity practices and incident response capabilities to meet defense contractual obligations.
ASC SUPPLIER OPER OEM DIVISION

POSTED

about 8 hours ago

DEADLINE

in 8 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity and CMMC Assessment SupportThe contract seeks to provide specialized support to a prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, specifically focused on the safeguarding of Controlled Unclassified Information (CUI). The effort involves assisting the prime contractor with implementing required security controls, conducting gap assessments, preparing documentation, and ensuring adherence to CMMC framework standards to meet Department of Defense cybersecurity requirements. The work is aligned with NAICS code 541512, indicating it falls under computer systems design and related services, and is structured as a subcontract to support broader defense contracting obligations. This subcontract is tied to performance at Hill Air Force Base with ZIP code 84056-5734 and was posted on August 9, 2026, with a response deadline of August 17, 2026. The acquiring agency is the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is part of a broader defense supply chain modernization and cybersecurity enhancement initiative. The subcontractor must possess demonstrated expertise in CMMC Level 2 implementation, knowledge of NIST SP 800-171 controls, and experience working within defense contracting environments to ensure the prime contractor meets all assessment and certification prerequisites within the established timeline.
ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 8 hours ago

DEADLINE

in 8 days
View Details
NAICS: 541512
New
DIBBS
Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.
CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 8 hours ago

DEADLINE

in 11 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.
LAND SUPPLY CHAIN

POSTED

about 8 hours ago

DEADLINE

in 11 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.
JACKSONVILLE BLDG

POSTED

about 8 hours ago

DEADLINE

in 11 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity for Covered Defense Information (CDI)
MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

about 8 hours ago

DEADLINE

in 8 days
View Details
NAICS: 541512
New
DIBBS
CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.
ACTIVE DEVICES DIVISION

POSTED

about 8 hours ago

DEADLINE

in 11 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance for Controlled Unclassified Information
ACTIVE DEVICES DIVISION

POSTED

about 8 hours ago

DEADLINE

in 11 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity and CUI SafeguardingThe contract entails the implementation and ongoing maintenance of comprehensive cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for systems handling controlled unclassified information. The work is focused on safeguarding CUI within the operational environment at Robins Air Force Base, Georgia, under the Department of Defense’s Warner Robins organization. The contractor must establish, validate, and sustain a robust security posture that aligns with federal requirements, addressing technical, administrative, and physical controls necessary to protect sensitive data from unauthorized access, disclosure, or compromise. This is a subcontract opportunity with a NAICS code of 541512, indicating it pertains to computer systems design services. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, providing a tight window for qualified entities to submit proposals. Performance must be executed at the specified location in Robins AFB, and the contractor is expected to demonstrate proven experience in delivering CMMC and NIST compliance solutions, including documentation, auditing, and continuous monitoring capabilities. The absence of a set-aside designation means the opportunity is open to all eligible small and large businesses, with evaluation likely centered on technical capability, past performance, and compliance readiness.
WARNER ROBINS

POSTED

about 8 hours ago

DEADLINE

in 11 days
View Details