This Government Contract opportunity from Department Of Commerce was posted on May 7, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

NATO Request for Information: Governance, Risk, and Compliance Tool

Closed

RFI-07119-GRCFederal

Submission Closed05/29/2026, 10:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541519

New

SLED

HID DigitalPersona Support and Maintenance ProviderThis subcontract involves providing ongoing technical support and maintenance for the HID DigitalPersona Premium Package to support prime contractors on projects for the Department of the California Highway Patrol. The scope of work includes executing standard support for 3,300 units, along with co-termed support for additional groups of 3,090 and 732 units across designated performance periods to ensure continuous active coverage. To qualify for this engagement, the provider must hold an Authorized HID Global Support Certification and maintain compliance with GSPD-401 standards. The project falls under NAICS code 541519 and is managed through the state of California's procurement system.

Department of the California Highway Patrol

POSTED

DEADLINE

Data Security & Cybersecurity ComplianceThis subcontract for Data Security and Cybersecurity Compliance supports the Maryland Transportation Authority by implementing and monitoring security protocols for prime contractors involved in debt collection projects. The scope of work focuses on managing data redundancy, backup systems, and disaster recovery processes to ensure operational continuity. To maintain strict adherence to state and federal privacy laws as well as PCI-DSS standards, the contractor will utilize specialized encryption tools and security monitoring software while providing regular security audit reports and comprehensive disaster recovery plans. The opportunity is categorized under NAICS code 541519 and was posted on October 27, 2026. Interested parties must submit their responses by the deadline of December 15, 2026. Further details regarding the procurement process can be accessed through the Maryland eMaryland Marketplace portal.

Maryland Transportation Authority

POSTED

DEADLINE

Tier II-IV Technical Support ServicesThis subcontract opportunity for the Maryland Transportation Authority involves providing Tier II, III, and IV technical support services to assist prime contractors with debt collection projects. The scope of work focuses on performing advanced technical troubleshooting and resolving complex issues related to collection software to ensure consistent system uptime. The selected provider will utilize remote support tools and ticketing systems to deliver software problem solutions and manage technical tickets. This procurement falls under NAICS code 541519, with a response deadline set for December 15, 2026.

Maryland Transportation Authority

POSTED

DEADLINE

IT Integration and Security ConsultingThis IT Integration and Security Consulting subcontract involves providing specialized security auditing and integration services for prime contractors working on City of Pasadena IT projects. The scope of work focuses on configuring Entra ID for single sign-on and ensuring full compatibility with GCC High environments. Additionally, the consultant is responsible for establishing robust security practices for data storage and transit utilizing SharePoint and Entra ID to deliver a fully secured and authenticated system environment. Managed by the Information Technology Department in California under NAICS code 541519, the project requires the delivery of detailed integration reports. Interested parties must submit their responses by the deadline of December 5, 2026.

Information Technology Department

POSTED

DEADLINE

Higher Education System Implementation & Support

Framingham State University

POSTED

DEADLINE

Managed Security Services and Operational SupportThe Managed Security Services and Operational Support subcontract focuses on the ongoing monitoring, policy management, and maintenance of the Palo Alto Panorama environment for prime contractors working on Massport network security projects. The scope of work includes performing critical software updates, managing security rule sets, and providing high-level Tier 2 and 3 technical support to ensure system stability and security. To maintain operational standards, the contractor is responsible for delivering monthly performance reports and ensuring consistent system uptime. This opportunity is associated with the Massachusetts Port Authority under NAICS code 541519, with a response deadline set for November 6, 2026.

Massachusetts Port Authority - Goods & Services

POSTED

DEADLINE

Network Infrastructure Support ProviderThe Network Infrastructure Support Provider subcontract for BMet College focuses on providing technical support and maintenance for refreshed switch architecture. The selected provider will be responsible for monitoring system health, troubleshooting hardware and software failures, and implementing firmware updates through the use of Remote Monitoring and Management tools. To ensure high standards of service, the contractor must hold HPE Aruba support certifications and adhere to strict SLA compliance regarding guaranteed uptime and response times. This engagement requires the delivery of regular maintenance reports to track system performance and stability. Interested parties should note that the response deadline is November 23, 2026. The project falls under NAICS code 541519 and is designed to support prime contractors managing the college's network infrastructure projects.

POSTED

DEADLINE

Cybersecurity Assessment and Penetration Testing ServicesThis subcontract for Cybersecurity Assessment and Penetration Testing Services supports prime contractors on State of Oregon Enterprise Information Services projects through the Department of Administrative Services. The scope of work involves performing comprehensive cybersecurity assessments and simulated attacks, including vulnerability scans, penetration tests, and Red Team/Blue Team simulations. Technical execution requires the use of industry-standard tools such as Nessus, Burp Suite, and Metasploit to identify and mitigate security risks. Qualified providers must hold professional certifications such as CISSP, CEH, or OSCP. Key deliverables for the engagement include a Cybersecurity Assessment Report, a detailed Vulnerability Matrix, and an Exercise After-Action Report. The work is centered in Salem, Oregon, under NAICS code 541519.

Department of Administrative Services

POSTED

DEADLINE

Cisco Network Managed Support and TrainingThe Cisco Network Managed Support and Training subcontract involves providing specialized technical support and knowledge transfer for data centre projects managed by the East Riding of Yorkshire Council. The selected provider will be responsible for troubleshooting, performance tuning, and delivering comprehensive training sessions for internal IT staff specifically focused on the Cisco NX-OS environment. To ensure high-level expertise, the contract requires a Cisco Certified Support Specialist to oversee these operations. Key deliverables include the provision of support logs and training materials, with a primary objective of maintaining consistent network uptime. This long-term engagement is scheduled to continue through July 2034. The opportunity was posted on October 27, 2026, with a response deadline of November 11, 2026, falling under NAICS code 541519.

East Riding of Yorkshire Council

POSTED

DEADLINE

EMS LINQ-Software Maint/Support-CNP

Solicitation # SRC0000037179

The Alabama State Department of Education, Child Nutrition Programs, is soliciting a sole source contract for consolidated software maintenance and support for EMS LINQ applications. This contract ensures uninterrupted service for several USDA food and nutrition programs, including the National School Lunch Program, School Breakfast Program, Summer Food Service Program, Child and Adult Care Food Program, Commodity Supplemental Food Program, Emergency Food Assistance Program, and the Statewide Procurement Program. The scope of work covers ongoing operations for software updates, security patches, hosting services, annual subscriptions, regulatory updates, and technical support for tools such as the SNP, SFSP, and CACFP Core Modules, Cartwheel Meal Counter software, and LINQ FDP. The contract is effective from October 1, 2026, to September 30, 2027, with the possibility of annual renewals for up to five years or until a total contract cost of 25,000 dollars is reached. Price escalations are limited to a maximum of 5 percent of the annual cost and cannot exceed the total contract ceiling. Award evaluation may include cost realism and price reasonableness analysis, and selected suppliers must provide proof of qualifications, professional licenses, and certificates of insurance. Compliance requirements include registration with the Alabama Secretary of State for foreign entities, enrollment in E-Verify, and adherence to state tax laws and the Beason-Hammon Alabama Taxpayer and Citizen Protection Act.

Alabama State Department of Education, Child Nutrition Programs

POSTED

DEADLINE

Managed SOC Monitoring and Incident ResponseThis subcontract for Managed SOC Monitoring and Incident Response, issued by SONI Ltd, requires the provision of continuous 24/7/365 security monitoring and initial incident response services. The selected provider will be responsible for alert triage and the execution of incident response protocols for prime contractors working on SONI Ltd security projects. The scope of work involves integrating telemetry from various sources and operating exclusively within SONI-owned tooling and SIEM environments. Classified under NAICS code 541519, the contract ensures constant vigilance and rapid response to security threats across the organization's digital infrastructure.

POSTED

DEADLINE

Client Device Configuration and Custom Imaging

DoIT - Dept Of Information Technology - Administration

POSTED

about 23 hours ago

DEADLINE

in 9 days

AI Contract Overview

The NATO Communications and Information Agency (NCIA) has issued RFI-07119-GRC to gather industry input on commercial-off-the-shelf Governance, Risk, and Compliance (GRC) tool solutions in support of a future acquisition. This RFI is a market research tool designed to inform planning and does not solicit bids or obligate NCIA to award a contract. Respondents are invited to share corporate capabilities, provide feedback on draft requirements, and highlight potential risks or concerns to enhance outcome efficiency, competition, and performance. The solution must support automated compliance tracking, real-time risk modeling, and Everything as Code methodologies, integrating with NATO security standards including NIST CSF, NIST SP 800-53, ISO/IEC 27001, CSA CCM, and OSCAL. The system must operate in secure NATO environments, including air-gapped networks, while ensuring data sovereignty, portability, and full NATO policy compliance. Only vendors from NATO member countries with personnel holding NATO security clearances are eligible to respond, and all technical support staff must be cleared prior to any future contract award. Response submissions are limited to 15 pages in PDF or Microsoft Word format, excluding cover pages, brochures, and past performance references. Submissions must be sent via email to [email hidden] no later than 12:00 hours CET on 29 May 2026. Licensing models, pricing structures, price protection, and vendor eligibility are key areas of interest, though no contract value, CLINs, or payment terms are defined at this stage. The RFI does not include formal FAR clauses, evaluation factors, or contract administration data beyond the point of contact, and no inspection, packaging, or delivery specifications are mandated. Future procurement decisions will be informed by this input, with the ultimate goal of selecting a GRC tool that enables continuous compliance across NATO’s complex, multi-framework IT landscape.

General Info

NCIA requests vendor information on COTS GRC tools for planning, no bids, due May 29, 2026.

Agency

Department Of Commerce → Bureau Of Industry And Security

NAICS

541519 - Other Computer Related Services

Place of Performance

BEL

Set-Aside

NONE

Documents

NCIA Request for Information RFI-07119-GRC Governance, Risk, and Compliance Tool

rfi

High

AI Contract Breakdown

Uniform Contract Format

Timeline

PhaseClosed

PostedMay 7

special-notice

Response DeadlineMay 29

Deadline has passed

Submission Closed

05/29/2026, 10:00:00 AM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Commerce → Bureau Of Industry And Security

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Commerce → Bureau Of Industry And Security

Office AddressN/A

ContactsNo contact information available

Full Description

The NATO Communications and Information Agency (NCIA) has issued a Request for Information (RFI) to identify qualified vendors and gather input on potential solutions to support the upcoming acquisition for a Commercial-Off-The-Shelf (COTS) Governance, Risk, and Compliance (GRC) tool.

This RFI is issued for planning purposes only and is not a request for bids. It is part of NCIA’s effort to ensure it has a clear understanding of the marketplace, available capabilities, and potential acquisition strategies.

NCIA invites industry to 1) share relevant corporate capabilities and experience; 2) review and comment on its draft requirements with a view to providing recommendations for improving performance outcomes, competition, and efficiency; and 3) identify any risks or concerns that should be considered during planning.

Do NOT submit your RFI response to the Department of Commerce. Submission instructions and additional details can be found in the RFI (attached).

The NCIA reference for this RFI is RFI-07119-GRC, and all correspondence concerning this matter should reference this number.

The response deadline is NLT 12:00 hours Central European Time (CET) on 29 May 2026.

Your participation in this RFI is greatly appreciated.