Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

NIST CSF 2.0 Maturity Analyst

Active

International

Response Deadline10/22/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity is for a NIST CSF 2.0 Maturity Analyst to support prime contractors on projects for the Financial Consumer Agency of Canada. The primary objective is to map technical security findings to the NIST Cybersecurity Framework 2.0 and translate these results into a high-level maturity narrative. This narrative is intended for senior management and external stakeholders, requiring the ability to describe the overall security posture effectively without revealing sensitive technical vulnerabilities. The successful candidate must possess Reliability status security clearance and be capable of delivering a professional, externally consumable report. The work is performed within the National Capital Region, with a response deadline set for October 22, 2026. This engagement falls under NAICS code 541611, focusing on administrative and management consulting services to ensure regulatory alignment and security transparency.

General Info

Agency

Government of Canada → Financial Consumer Agency of Canada

NAICS

541611 - Administrative Management and General Management Consulting Services

Place of Performance

National Capital Region (NCR), CAN

Set-Aside

NONE

Documents

This scope was carved out of 20261288.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

SBIPS - Professional Cyber Security Evaluation Services for the Financial Consumer Agency of Canada (FCAC) under Solution-Based SBIPS Supply Arrangement EN537-05IT01/XXX/EI.

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 6

subcontract

Response DeadlineOct 22

Submission deadline

Response Deadline

10/22/2026, 07:00:00 PM UTCin 15 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyGovernment of Canada → Financial Consumer Agency of Canada

ContactsNo contacts available

OfficeN/A

Organization / AgencyGovernment of Canada → Financial Consumer Agency of Canada

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Maps technical security findings to the NIST Cybersecurity Framework (CSF) 2.0 for prime contractors on Financial Consumer Agency of Canada (FCAC) projects. Develops a high-level maturity narrative for senior management and external stakeholders, ensuring the posture is described without disclosing sensitive technical vulnerabilities. Requires Reliability status security clearance. Delivers an externally consumable external report.

Similar Contracts

Same NAICS industry code

Business Impact Analysis/Disaster Recovery Plan/Business Continuity Plan Services

Solicitation # business-impact-analysisdisaster-recovery-planbusiness-continuity-plan-services

The Inland Empire Utilities Agency is seeking electronic proposals from qualified vendors to implement comprehensive Business Impact Analysis, Disaster Recovery Plan, and Business Continuity Plan services. The primary objective of this initiative is to strengthen organizational resilience, safeguard critical business functions, and mitigate potential operational disruptions. This solicitation is open to various small business designations, including SBA certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone Small Businesses. Interested parties must submit their responses by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Veronica Cordova.

Inland Empire Utilities Agency

POSTED

about 7 hours ago

DEADLINE

in about 1 month

Sponsorship ROI Reporting and AnalyticsThe Sponsorship ROI Reporting and Analytics subcontract, issued by the 32nd DAA in Costa Mesa, California, focuses on data collection and analysis to demonstrate value for prime contractors operating on OC Fair and Event Center projects. The selected provider will utilize data analytics software and survey tools to compile critical performance metrics, return on investment data, and sponsor satisfaction feedback while maintaining strict data privacy compliance. Key deliverables include the submission of weekly sales progress reports to the Chief Business Development Officer and the creation of comprehensive post-event ROI reports for sponsors. This opportunity falls under NAICS code 541611, with a response deadline set for October 30, 2026.

32nd DAA -Costa Mesa

POSTED

about 10 hours ago

DEADLINE

Program Administration & ReportingThe Program Administration and Reporting subcontract for the City of Camden involves providing administrative tracking and reporting services for the Employee Assistance Program. The selected contractor will be responsible for monitoring program utilization, preparing quarterly statistical summaries, and offering expert consultation on program policy statements. Due to the nature of the data handled, the contractor must possess a thorough understanding of HIPAA and privacy laws. Key requirements include the maintenance of 1,000,000 dollars in Cyber Security and Privacy Liability insurance. The primary deliverables consist of quarterly statistical reports and formal policy recommendations. Interested parties should note that the response deadline for this opportunity is October 27, 2026.

POSTED

about 13 hours ago

DEADLINE

Revenue Tracking and Performance AnalyticsThe Revenue Tracking and Performance Analytics subcontract, issued by the Arts and Cultural Enrichment agency in Florida, focuses on establishing data infrastructure and reporting systems for prime contractors working on City of Coral Springs projects. The selected provider will be responsible for implementing capabilities to track measurable revenue and analyze sponsor fulfillment metrics to determine overall return on investment. Key deliverables include the creation of data dashboards and the provision of detailed performance reports. Qualified candidates must demonstrate proficiency in revenue tracking software or CRM systems to effectively manage the required analytics. This opportunity was posted on October 6, 2026, with a response deadline of October 29, 2026. The project falls under NAICS code 541611, emphasizing the need for professional administrative and management consulting services.

Arts & Cultural Enrichment

POSTED

about 14 hours ago

DEADLINE

Public-Private Partnership (PPP) DevelopmentThe City of Coral Springs is seeking a subcontractor for Public-Private Partnership development to establish strategic alliances between the municipality and private entities. The primary objective is to structure PPP agreements specifically for arts and recreation assets, which involves identifying investment partners and creating the necessary legal and financial frameworks. The selected partner must possess specialized expertise in municipal PPP frameworks and public sector procurement laws to ensure all agreements are compliant and sustainable. This project is managed by the Arts and Cultural Enrichment agency in Florida. Interested parties must submit their responses by October 29, 2026. The final deliverables for this engagement include fully executed partnership frameworks and formal PPP agreements that facilitate private sector investment into city assets.

Arts & Cultural Enrichment

POSTED

about 14 hours ago

DEADLINE

Internal Control Assessment and Process ImprovementThis subcontract for the Village of Chase in British Columbia focuses on Internal Control Assessment and Process Improvement for municipal audit projects. The selected provider will perform internal financial control analysis for prime contractors, which includes mapping financial workflows and testing the effectiveness of controls through detailed walkthroughs. The primary objective is to identify internal control weaknesses and draft corresponding remediation recommendations. Qualified candidates must hold professional certifications as a CPA, CIA, or CISA. The final deliverables for this engagement consist of a comprehensive internal control assessment report and draft recommendations intended for the Management Letter. Interested parties must submit their responses by October 30, 2026.

Village of Chase

POSTED

about 14 hours ago

DEADLINE

Risk Management Consulting ServicesThis subcontract for Risk Management Consulting Services supports prime contractors working on projects for the City of Camden Law Department. The selected provider will be responsible for developing comprehensive risk management strategies and offering expert guidance on the avoidance, reduction, and transfer of risk through the application of actuarial modeling tools. Key deliverables include the production of detailed risk management plans, assessment reports, and strategic recommendations. To ensure a high standard of professional expertise, candidates must hold recognized certifications such as CRM, ARM, or CPCU. The opportunity is categorized under NAICS code 541611. Interested parties must submit their responses by the deadline of October 27, 2026, at 3:00 PM.

POSTED

about 14 hours ago

DEADLINE

Specialized State Accounting ConsultingThis subcontract for Specialized State Accounting Consulting supports prime contractors working on Texas Low Level Radioactive Waste Disposal Compact Commission projects. The selected provider will offer subject matter expertise in Texas-specific governmental accounting, focusing on the Texas Uniform Statewide Accounting System and the Texas Legislative Appropriation Request process to maintain strict adherence to statewide contracting guidelines. The scope of work includes the delivery of technical guidance, comprehensive compliance reviews, and the preparation of supporting working papers. This opportunity is categorized under NAICS code 541611 and is associated with the Texas Radioactive Waste Disposal Commission, with a response deadline set for November 13, 2026.

TX RADIOACTIVE WASTE DISPOSAL COMMISSION

POSTED

about 15 hours ago

DEADLINE

in about 1 month

ADA Policy and Program Development Consultant

Human Resources Department

POSTED

about 15 hours ago

DEADLINE

Youth Program Administration & Evaluation Services

POSTED

about 15 hours ago

DEADLINE

Impact Fee Financial Consultant / EconomistThis subcontract opportunity seeks an Impact Fee Financial Consultant or Economist to develop a legally defensible impact fee methodology for prime contractors operating on projects within Walton County, Florida. The selected consultant will utilize demographic data and financial modeling software to analyze population growth and recreation demand, ultimately calculating specific per-unit or per-square-foot fees. The primary objective is to produce a formal Recreation Impact Fee Methodology report that ensures full compliance with Florida state statutes. Qualified candidates must demonstrate proven experience in public sector impact fee methodology and maintain active registration with Florida Sunbiz. This project falls under NAICS code 541611 and is managed by the Administration agency in Florida. Interested parties must submit their responses by the deadline of November 3, 2026.

POSTED

about 15 hours ago

DEADLINE

Building Envelope Construction Inspector / AdministratorThis subcontract opportunity is for a Building Envelope Construction Inspector and Administrator to support prime contractors on facility projects at Sam Houston State University. The selected provider will be responsible for performing on-site inspections and contract administration to ensure that building envelope materials and installation methods align with approved specifications. Key technical duties include utilizing field testing equipment to verify the integrity of seals and waterproofing, as well as delivering detailed inspection reports, field observation logs, and regular project management updates. Qualified candidates must possess CCM certification or equivalent professional experience in the relevant trade. This procurement falls under NAICS code 541611 and was posted on October 6, 2026, with a response deadline of November 2, 2026. Interested parties can find further details through the Texas SmartBuy portal.

Sam Houston State University

POSTED

about 15 hours ago

DEADLINE

More opportunities from Government of Canada → Financial Consumer Agency of Canada

Same awarding agency

ITSG-33 Cybersecurity Control EvaluatorThis subcontract opportunity is for an ITSG-33 Cybersecurity Control Evaluator to support prime contractors on projects for the Financial Consumer Agency of Canada. The selected provider will perform internal evaluations of IT security controls, utilizing the ITSG-33 Annex 3A framework and harmonized threat and risk assessment methodologies. Key responsibilities include conducting evidence collection, performing gap analyses, determining residual risks, and developing prioritized remediation plans to ensure robust security postures. The project is based in the National Capital Region and requires the delivery of a detailed, evidence-based internal report. Candidates must possess Reliability status security clearance to be eligible. The solicitation was posted on October 6, 2026, with a response deadline of October 22, 2026.

Computer Systems Design Services

POSTED

DEADLINE

SBIPS - Professional Cyber Security Evaluation Services for the Financial Consumer Agency of Canada (FCAC) under Solution-Based SBIPS Supply Arrangement EN537-05IT01/XXX/EI.

Solicitation # 20261288

The Financial Consumer Agency of Canada (FCAC) is seeking an independent third-party cybersecurity firm to conduct an enterprise-level assessment of its cybersecurity posture. This selective tendering process is open only to fifteen pre-qualified Tier 1 Solution-Based Informatics Professional Services (SBIPS) Supply Arrangement Holders in the Security Management stream within the National Capital Region. The project involves an internal evaluation of IT security controls using ITSG-33 Annex 3A, incorporating evidence collection, gap analysis, and residual risk determination to create a prioritized remediation plan. Additionally, the contractor must produce a high-level maturity narrative based on the NIST Cybersecurity Framework 2.0 for executive and external stakeholder communication. The contract is anticipated to start on October 29, 2026, and conclude by March 31, 2027, with an estimated level of effort of 164 days. Security requirements include Reliability status for both the corporation and its resources, with Common PS SRCL 6 applying. Proposals must be submitted by October 22, 2026, at 2:00 PM Ottawa Time. This procurement is subject to various international and domestic trade agreements, including the WTO-AGP and CFTA, and documents may be submitted in either official language.

Other Computer Related Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS