Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

NERC CIP Cyber Vulnerability Assessment Services

Open

State & Local

Response Deadline12/03/2026, 12:00:00 AM EST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for the Power Authority of New York involves providing specialized cyber vulnerability assessment services for Industrial Control Systems and Operational Technology. The selected provider will support prime contractors by performing penetration testing and vulnerability scans on Bulk Electric System Cyber Assets, while ensuring that Electronic Security Perimeters align with NERC CIP standards. Key deliverables for this engagement include a comprehensive Cyber Vulnerability Assessment Report and a detailed Compliance Gap Analysis. Qualified candidates must hold professional certifications, specifically GICSP or CISSP. The opportunity is categorized under NAICS code 541512, with a response deadline set for December 3, 2026.

General Info

Agency

Power Authority of New York

NAICS

541512 - Computer Systems Design Services

Place of Performance

NY, USA

Set-Aside

NONE

Documents

This scope was carved out of 2140636.

The full solicitation package (3 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

NERC CIP Cyber Vulnerability Assessment

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 10

subcontract

Response DeadlineDec 3

Submission deadline

Response Deadline

12/03/2026, 12:00:00 AM ESTin 22 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyPower Authority of New York

ContactsNo contacts available

OfficeN/A

Organization / AgencyPower Authority of New York

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs cyber vulnerability assessments of Industrial Control Systems (ICS) and Operational Technology (OT) for prime contractors on Power Authority of New York (NYPA) projects. Conducts vulnerability scans and penetration testing on Bulk Electric System (BES) Cyber Assets and reviews Electronic Security Perimeters (ESP) per NERC CIP standards. Requires GICSP or CISSP certifications. Delivers a Cyber Vulnerability Assessment Report and Compliance Gap Analysis.

Similar Contracts

Same NAICS industry code

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

about 2 hours ago

DEADLINE

PEP Implementation Testing ServicesThe PEP Implementation Testing Services subcontract involves providing comprehensive testing for the Patient Engagement Portal on behalf of prime contractors for the Sheffield Health Partnership University NHS Foundation Trust. The scope of work includes executing User Acceptance Testing, system integration testing, and supplier testing through the use of QA environments and automated tools. A critical requirement of the engagement is strict adherence to healthcare data privacy standards to ensure the security of sensitive information. The selected provider is responsible for delivering detailed testing reports and formal UAT sign-off documentation. This opportunity was posted on November 10, 2026, with a response deadline of November 26, 2026. The project falls under NAICS code 541512 and is centered on ensuring the functional integrity and compliance of the portal before final implementation.

Sheffield Health Partnership University NHS Foundation Trust

POSTED

about 5 hours ago

DEADLINE

PN365 - Patient Engagement Portal

Solicitation # C487615

The Sheffield Health Partnership University NHS Foundation Trust is seeking a single supplier to provide a Patient Engagement Portal (PEP) for patient administration. This procurement is conducted via the G-Cloud 15 framework and is noted as being particularly suitable for small and medium-sized enterprises. The system must be fully operational and in live use by March 31, 2027, with the supplier responsible for all necessary testing and training prior to this date. The estimated contract value is 300,000 GBP including VAT, with an initial performance period from January 6, 2027, to January 5, 2031, and an option to extend for an additional two years until January 5, 2033. The selection process follows a competitive flexible procedure consisting of three stages: an initial shortlist via the G-Cloud 15 Digital Platform, a formal tender submission, and a final demonstration for the top three scoring tenderers. Award decisions are based on a weighted evaluation comprising technical quality at 40%, commercial price at 30%, the demonstration at 20%, and social value at 10%. Submissions must be made in English via the Atamis portal by November 26, 2026, and the contract stipulates a 30-day payment term.

Sheffield Health Partnership University NHS Foundation Trust

POSTED

about 5 hours ago

DEADLINE

EDR Deployment and Activation Support ServicesThe EDR Deployment and Activation Support Services subcontract involves providing technical activation of EDR licenses for prime contractors working on security projects for Triple A S.A. E.S.P. in Colombia. The scope of work includes executing license activation within the agency infrastructure, verifying that agents are reporting correctly to the console, and offering necessary transition support. The final deliverables for this engagement are a fully activated EDR system and a comprehensive technical certification report. To qualify for this role, the provider must possess technical certification in CrowdStrike Falcon platform administration and strictly adhere to all Triple A security manuals. This opportunity was posted on November 10, 2026, with a response deadline of November 23, 2026. The project falls under NAICS code 541512, focusing on specialized computer systems design services.

Triple A S.A. E.S.P.

POSTED

about 6 hours ago

DEADLINE

IT Systems Integrator (M365 Specialist)This subcontract opportunity is for an IT Systems Integrator specializing in Microsoft 365 to support software deployments for the Caerphilly County Borough Council. The selected provider will work under prime contractors to perform technical configuration and integration, specifically focusing on connecting the ECMS with Council systems and Microsoft 365 via M365 APIs. Key responsibilities include configuring role-based access controls, managing data migration from legacy systems, and providing essential support during User Acceptance Testing to ensure the system is production-ready. The project emphasizes technical expertise, with a preference for Microsoft Certified Professionals. Interested parties must submit their responses by December 11, 2026, in accordance with the solicitation posted on November 10, 2026. The engagement falls under NAICS code 541512 and aims to deliver a fully integrated and configured technical environment for the council.

Caerphilly County Borough Council

POSTED

about 8 hours ago

DEADLINE

in about 1 month

Electronic Committee Management System (ECMS).

Solicitation # CCBC/PS3024/26/GH

Caerphilly County Borough Council is seeking tenders for the provision, implementation, support, and maintenance of a secure, cloud-hosted Electronic Committee Management System (ECMS). This system is intended to modernize the administration of democratic services by facilitating the creation, management, publication, and archiving of committee agendas, reports, minutes, and decisions. Key functional requirements include committee and calendar management, decision tracking, a public-facing publication portal, and secure access via desktop, tablet, and mobile devices. The solution must integrate with Microsoft 365 and other council systems, featuring role-based access controls and audit reporting. Crucially, the system must be fully bilingual in English and Welsh to ensure compliance with Welsh Language Standards, accessibility requirements, data protection legislation, and recognized security standards. The contract is scheduled to run from November 1, 2027, to October 31, 2032, with a possible five-year extension option renewed annually, potentially extending the term to November 1, 2037. The procurement is being conducted under a Competitive Flexible Procedure per the Procurement Act 2023, with a multi-stage evaluation weighted toward demonstrations (45%), quality questions (35%), and price (20%). The successful supplier will be responsible for system configuration, data migration, user acceptance testing, and comprehensive training for administrators, officers, and elected Members. Payment terms are set at 30 days, and the submission deadline for tenders is December 11, 2026.

Caerphilly County Borough Council

POSTED

about 8 hours ago

DEADLINE

in about 1 month

Послуги з доопрацювання та розширення функцій інформаційно-комунікаційної системи «е-Тернопіль» на базі комп’ютерної програми «Єдина інформаційно-аналітична система управління ресурсами та взаємодії з громадою в м.Тернопіль» («ЄІАСУРВГ»), а саме розробки

Solicitation # UA-2026-11-10-011367-a

The Ternopil City Council is seeking services for the refinement and expansion of the e-Ternopil information and communication system. This project focuses on developing additional functions based on the Unified Information and Analytical System for Resource Management and Community Interaction in Ternopil. The initiative is part of the Ternopil Municipal Territorial Community Informatization Program for 2025-2027. This procurement is being conducted by a local self-government body under specific regulations that allow for the protection of intellectual property rights. The project will be executed within the city of Ternopil, Ukraine, and is managed by the Ternopil City Council to enhance the digital infrastructure and community interaction capabilities of the region.

Тернопільська міська рада

POSTED

about 9 hours ago

DEADLINE

Enterprise IWMS/CAFM Administration and RolloutThe Enterprise IWMS/CAFM Administration and Rollout is a subcontract opportunity with NAVSEA HQ under the Department of Defense, performed at the Washington Navy Yard. The project focuses on the administration, configuration, and rollout of the ARCHIBUS production database for prime contractors involved in Enterprise Workspace Management. Key technical responsibilities include managing user account lifecycles, security groups, roles, and Virtual Private Archives, as well as configuring organizational GeoHierarchies utilizing Agile delivery methodology. The successful contractor is responsible for delivering a fully configured ARCHIBUS production database and comprehensive Site Rollout Completion Packages. Due to the nature of the work, personnel are required to hold a Tier 3 background investigation. The solicitation is categorized under NAICS code 541512, with a response deadline set for December 4, 2026.

POSTED

about 10 hours ago

DEADLINE

Multi-Tenant Data Architecture & ManagementThe Multi-Tenant Data Architecture and Management subcontract supports the Defense Information Systems Agency within the Department of Defense. The project focuses on the design and operation of data-layer capabilities for prime contractors working on enterprise service projects. Key responsibilities include managing high-volume data ingestion, transformation, storage, and access control, while maintaining interface monitoring to ensure seamless interoperability across a high-performance integrated data layer. This opportunity requires personnel to hold a Secret security clearance to handle sensitive information. The work falls under NAICS code 541512 and is centered in the 20755 zip code area. Interested parties should note the response deadline of November 30, 2026.

Defense Information Systems Agency

POSTED

about 10 hours ago

DEADLINE

Cross-Domain Solutions (CDS) & Data IntegrationThis subcontract for the Defense Information Systems Agency focuses on the implementation and management of secure data transfers between disparate security domains and platforms. The scope of work involves configuring Cross-Domain Solutions, API gateways, and automated data integration pipelines to connect various SaaS and PaaS platforms for prime contractors on enterprise service projects. The project requires personnel to hold Top Secret/TS/SCI security clearances to ensure the delivery of functional and secure data pipelines. This effort falls under NAICS code 541512 and is centered on maintaining high-security standards for data movement across Department of Defense environments.

Defense Information Systems Agency

POSTED

about 10 hours ago

DEADLINE

DevSecOps & High-Impact Cloud EngineeringThe DevSecOps and High-Impact Cloud Engineering subcontract supports the Defense Information Systems Agency by deploying, securing, and maintaining enterprise applications within highly restricted cloud environments. The scope of work focuses on implementing DevSecOps pipelines, automated testing, and secure code deployment specifically for Department of Defense Impact Level 6 or higher environments to ensure all applications are accredited and operational. Due to the sensitive nature of the work, the contract mandates strict security compliance, requiring CMMC Level 2 certification and Top Secret clearances for personnel. This effort is categorized under NAICS code 541512 and is designed to provide prime contractors with the specialized engineering necessary to operate within the most secure cloud tiers of the Department of Defense.

Defense Information Systems Agency

POSTED

about 10 hours ago

DEADLINE

Palantir & Workday Platform SupportThis subcontract opportunity involves providing technical administration and operational support for Palantir and Workday platforms in support of Defense Information Systems Agency enterprise service projects. The scope of work includes sustained operations, continuous software integration, and PaaS engineering specifically for Palantir Foundry, Gotham, Maven Smart System, and Workday to ensure the delivery of integrated operational environments. Due to the nature of the work, personnel are required to hold security clearances ranging from Secret to TS/SCI. The project falls under NAICS code 541512 and is associated with the Department of Defense. Interested parties should note the response deadline of November 30, 2026.

Defense Information Systems Agency

POSTED

about 10 hours ago

DEADLINE

More opportunities from Power Authority of New York

Same awarding agency

Industrial Waste and Debris RemovalThis subcontract for Industrial Waste and Debris Removal supports prime contractors on New York Power Authority power plant projects. The selected provider will offer on-call roll-off container services, utilizing heavy-duty trucks and large-capacity industrial bins to remove bulk construction debris and industrial waste from project sites. The contractor must maintain commercial hauling insurance and strictly adhere to all NYPA site safety protocols. This opportunity is categorized under NAICS code 484220, with a response deadline set for December 3, 2026.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

about 17 hours ago

DEADLINE

Recyclables Collection and ProcessingThis subcontract for the Power Authority of New York involves the collection and transportation of recyclable materials, including paper, metals, plastics, and cardboard, from prime contractors working on power plant projects. The selected provider is responsible for hauling either source-separated or commingled recyclables to a certified Materials Recovery Facility. To ensure compliance, the contractor must provide certification of delivery to a licensed facility and submit detailed material diversion weight reports. The solicitation was posted on November 10, 2026, with a response deadline of December 3, 2026, falling under NAICS code 562119.

Other Waste Collection

POSTED

about 17 hours ago

DEADLINE

General Solid Waste Collection and DisposalThis subcontract for General Solid Waste Collection and Disposal involves the collection, hauling, and legal disposal of non-hazardous municipal solid waste and general facility refuse for prime contractors working on Power Authority of New York power plant projects. The selected provider will be responsible for transporting waste from designated on-site collection points to approved landfills or waste-to-energy facilities, ensuring all activities comply with New York State DEC waste transport regulations. Key requirements for this engagement include possessing valid hauling permits for Schoharie County, New York, and the consistent delivery of waste removal and disposal manifests. Interested parties should note that the response deadline is December 3, 2026, and the work falls under NAICS code 562111.

Solid Waste Collection

POSTED

about 17 hours ago

DEADLINE

SER System Equipment SupplyThis subcontract agreement involves the procurement and delivery of specialized electrical station service equipment for prime contractors working on the New York Power Authority Niagara Power Project. The selected provider is responsible for sourcing the SER system equipment and ensuring its delivery to the project site located in Lewiston, New York, in strict accordance with the specifications detailed in the NYPA Ariba event documents. The opportunity is managed by the Power Authority of New York under NAICS code 423610. Interested parties must adhere to the established timeline, with the solicitation posted on November 10, 2026, and a response deadline set for December 3, 2026.

Electrical Apparatus and Equipment, Wiring Supplies, and Related Equipment Merchant Wholesalers

POSTED

about 17 hours ago

DEADLINE

Electrical Wiring for HVAC SystemsThis subcontract involves providing electrical wiring services for HVAC systems on projects managed by the Power Authority of New York. The scope of work includes performing electrical rough-ins and final connections specifically for Daikin VRV III systems. Key responsibilities entail installing conduit, pulling power wiring from panels to units, and installing disconnect switches in strict accordance with National Electrical Code and local New York regulations to ensure complete power delivery to the HVAC equipment. To qualify for this engagement, the contractor must be a New York State Licensed Master Electrician. The project falls under NAICS code 238210 and is designed for prime contractors seeking specialized electrical support for these specific utility authority installations.

Electrical Contractors and Other Wiring Installation Contractors

POSTED

about 17 hours ago

DEADLINE

VRV HVAC Installation and Commissioning ServicesThis subcontract for VRV HVAC Installation and Commissioning Services involves the installation and commissioning of Daikin VRV III systems for prime contractors working on Power Authority of New York projects. The scope of work includes the installation of indoor and outdoor units, brazing refrigerant lines, installing condensate drains, and executing specific manufacturer commissioning sequences to deliver a fully operational HVAC system. Qualified providers must hold a New York State HVAC license and maintain Daikin Factory Certification. The project falls under NAICS code 238220 and is associated with the Power Authority of New York.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

about 17 hours ago

DEADLINE

Daikin VRV III System Equipment SupplierThis subcontract involves the supply and delivery of Daikin VRV III HVAC system components for prime contractors working on Power Authority of New York projects. The scope of work includes sourcing and transporting outdoor units, indoor units, and proprietary control systems to the designated project site located in Gilboa, New York. To qualify for this contract, the supplier must maintain status as an authorized Daikin equipment distributor. The successful contractor is responsible for ensuring all specified HVAC equipment is delivered along with the corresponding manufacturer warranties.

Other Commercial Equipment Merchant Wholesalers

POSTED

about 17 hours ago

DEADLINE

Structural Steel Material SupplyThis subcontract for Structural Steel Material Supply involves the sourcing and delivery of raw structural steel shapes and plates for prime contractors working on Power Authority of New York turbine projects. The scope of work focuses on providing certified steel mill products, specifically A36 and A572 grades, to ensure the structural integrity of the project components. To maintain quality control and regulatory compliance, the supplier is required to provide Mill Test Reports that verify all materials meet established ASTM standards. This agreement is categorized under NAICS code 423510 and is dedicated to the essential supply of raw materials necessary for the completion of the specified energy infrastructure.

Metal Service Centers and Other Metal Merchant Wholesalers

POSTED

about 17 hours ago

DEADLINE

Hot-Dip Galvanizing ServicesThis subcontract for Hot-Dip Galvanizing Services involves providing specialized zinc coating for steel components used by prime contractors on Power Authority of New York turbine projects. The scope of work requires the immersion of fabricated steel parts into molten zinc in strict accordance with ASTM A123/A123M standards. To fulfill these requirements, the contractor must utilize industrial galvanizing kettles and acid pickling tanks to ensure the proper preparation and delivery of galvanized steel components. The project is categorized under NAICS code 332813 and was posted on November 10, 2026. It focuses on critical infrastructure support for the state of New York, ensuring that turbine components are properly treated for corrosion resistance and durability.

Electroplating, Plating, Polishing, Anodizing, and Coloring

POSTED

about 17 hours ago

DEADLINE

Industrial Coating and FinishingThis industrial coating and finishing subcontract involves the application of protective coatings and primers for prime contractors working on Power Authority of New York turbine projects. The scope of work includes performing surface preparation through abrasive blasting in accordance with SSPC standards and applying industrial-grade polyurethane or epoxy finish coats to steel components. The contractor is required to utilize industrial sprayers and blasting equipment to deliver the finished coated steel components. This opportunity is categorized under NAICS code 238320 and was posted on November 10, 2026.

Painting and Wall Covering Contractors

POSTED

about 17 hours ago

DEADLINE

Structural Steel Fabrication (Turbine Platforms)This subcontract involves the fabrication of structural steel components for turbine platforms on projects managed by the Power Authority of New York. The scope of work requires the contractor to perform precise cutting, drilling, punching, and welding of structural steel shapes in strict accordance with engineering drawings. All welding must be completed using AWS certified processes to ensure structural integrity and compliance with industry standards. To successfully execute the contract, the provider must utilize specialized equipment, including CNC plasma or laser cutters and overhead cranes. The final deliverables consist of fully fabricated and assembled steel platform components delivered to the prime contractor. This project falls under NAICS code 332312 and is focused on supporting critical infrastructure for the state of New York.

Fabricated Structural Metal Manufacturing

POSTED

about 17 hours ago

DEADLINE

SER SYSTEM EQUIPMENT

Solicitation # 2140728

The Power Authority of New York is soliciting proposals for the procurement of SER system equipment to support the Niagara Power Project located in Lewiston, New York. This solicitation, identified by solicitation number 2140728 and contract number N26-10391367LI, requires bidders to submit their proposals through the Ariba event portal. Detailed instructions for participating in the bidding process are available on the official New York Power Authority website. The solicitation was posted on November 10, 2026, with a response deadline of December 3, 2026, at 4:00 PM. The primary point of contact for this procurement is Lindsey Iuorio, Site Buyer II. There are currently no established goals for Service-Disabled Veteran-Owned Businesses, Minority/Women Business Enterprises, or Disadvantaged Business Enterprises for this specific contract.

Electrical Apparatus and Equipment, Wiring Supplies, and Related Equipment Merchant Wholesalers

POSTED

about 17 hours ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS