Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

NIST Cybersecurity Compliance & Continuous Monitoring Provider

Active

State & Local

Response Deadline10/28/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity, titled NIST Cybersecurity Compliance and Continuous Monitoring Provider, is issued by the Illinois agency INFOTECH448. The selected provider will perform continuous security monitoring for prime contractors on Illinois Capital Development Board projects to ensure cloud environments adhere to state and federal standards. Key responsibilities include implementing monitoring according to NIST SP 800-137, managing data encryption for both at-rest and in-transit data, and executing annual failover and backup recovery tests. The provider is required to deliver security monitoring reports, NIST compliance certifications, and disaster recovery results. This opportunity falls under NAICS code 541519 and was posted on September 8, 2026, with a response deadline of October 28, 2026.

General Info

INFOTECH448 seeks a provider for NIST cybersecurity compliance and continuous monitoring services.

Agency

Illinois → INFOTECH448 - Information Technology

NAICS

541519 - Other Computer Related Services

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of 27-448DOIT-INFOT-B-52519.

The full solicitation package (11 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

CDB Construction Management Automation and Modernization Solution RFP

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedSep 8

subcontract

Response DeadlineOct 28

Submission deadline

Response Deadline

10/28/2026, 07:00:00 PM UTCin 7 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyIllinois → INFOTECH448 - Information Technology

ContactsNo contacts available

OfficeN/A

Organization / AgencyIllinois → INFOTECH448 - Information Technology

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs continuous security monitoring for prime contractors on Illinois Capital Development Board (CDB) projects to ensure cloud environments meet state and federal standards. Implements monitoring per NIST SP 800-137, manages data encryption at rest and in transit, and conducts annual failover and backup recovery tests. Delivers security monitoring reports, NIST compliance certification, and disaster recovery results.

Similar Contracts

Same NAICS industry code

CHANGE ORDER NOTICE: LRS VBS Mainframe Software Maintenance

Solicitation # 27-448DOIT-INFOT-B-54610

This special notice pertains to a change order for LRS VBS Mainframe Software Maintenance, identified by solicitation number 27-448DOIT-INFOT-B-54610. Issued by the State of Illinois through the Department of Innovation and Technology, the notice was posted on October 21, 2026, with a response deadline of November 4, 2026. The primary points of contact for this action are Purchaser Dave Carter and State Purchasing Officer Joshua Sergent. The change order is governed by specific legal and regulatory frameworks, including Section 33E-9 of the Criminal Code, Section 1-15.12 of the Procurement Code, and Section 1.2067 of the CPO-GS Administrative Rules. While the notice serves as a formal announcement of a contract modification, specific details regarding the contract value, pricing, and performance schedules are not provided in the available documentation.

INFOTECH448 - Information Technology

POSTED

about 6 hours ago

DEADLINE

Classified Data Sanitization ServicesThis subcontract involves providing secure erasure and sanitization services for classified data supporting Air Force Sustainment Center F-15 DMS projects. The scope of work focuses on the sanitization of Advanced Display Core Processors and Mission Cartridges using NSA-approved equipment to ensure units are ready for non-classified repair or disposal. The project is managed under the Department of Defense and will be performed in Warner Robins. Due to the nature of the classified data, the contractor must maintain a Facility Security Clearance and ensure all assigned personnel hold the necessary security clearances.

FA8538 Afsc Pzaab

POSTED

about 9 hours ago

DEADLINE

Technical Support Services (Help Desk)This subcontract for Technical Support Services (Help Desk) provides essential technical assistance to prime contractors working on Navy Recruiting Command projects. The scope of work includes troubleshooting access issues, offering technical guidance on platform utilization, and managing user accounts and credentials. These services are delivered during normal business hours through the use of customer support ticketing systems to ensure consistent platform uptime and ongoing operational support. Managed under NAICS code 541519 for the Department of Defense and Navsup Flt Logistics Ctr Norfolk, the work is performed in Millington, Tennessee. The opportunity was posted on October 21, 2026, with a response deadline of October 23, 2026.

Navsup Flt Logistics Ctr Norfolk

POSTED

about 9 hours ago

DEADLINE

LoRRca System Software SupportThis subcontract, titled LoRRca System Software Support, is issued by the National Institutes of Health Olao under the Department of Health and Human Services. The contract focuses on providing essential technical support and troubleshooting for LoRRca system software to assist prime contractors working on NIH NHLBI Sickle Cell Branch projects. The primary objective is to ensure software compatibility and functionality for the assessment of red blood cell aggregation and deformability, with deliverables centered on maintaining optimal machine performance. Support services may be delivered either remotely or on-site. Due to the nature of the proprietary software involved, the selected provider must hold OEM certification to gain necessary access. Interested parties should note that the response deadline for this opportunity is November 5, 2026, and the work falls under NAICS code 541519.

National Institutes Of Health Olao

POSTED

about 9 hours ago

DEADLINE

COMSEC Accountability & OperationsThe COMSEC Accountability and Operations subcontract, issued by the Department of Defense IT Contracting Division, focuses on managing communications security operations and accountability for prime contractors on USAWHC G-6 projects. Based in Fort Bragg, the role involves performing monthly and bi-annual inventories of controlled cryptographic items, managing hand-receipts, and conducting financial liability investigations regarding property loss to ensure accurate records and inventories. Qualified personnel must possess a Secret security clearance and have completed Department of War-mandated Key Management Infrastructure and COMSEC training. This opportunity falls under NAICS code 541519, with a response deadline set for November 2, 2026.

It Contracting Division - PL83

POSTED

about 9 hours ago

DEADLINE

Full-Spectrum Cybersecurity & RMFThis subcontract opportunity, titled Full-Spectrum Cybersecurity and RMF, supports prime contractors on USAWHC G-6 projects within the Department of Defense. The scope of work focuses on cybersecurity sustainment, risk management, and incident response, specifically requiring the performance of Risk Management Framework and Authority to Operate sustainment. Contractors will utilize vulnerability scanners and compliance tools to manage vulnerabilities and provide essential remediation reports to maintain a valid ATO. The project is based in Fort Bragg and requires personnel to hold either a Secret or Top Secret security clearance. Interested parties should note the response deadline of November 2, 2026. The contract falls under NAICS code 541519 and is managed through the IT Contracting Division of the Department of Defense.

It Contracting Division - PL83

POSTED

about 9 hours ago

DEADLINE

U.S. Government Software Support ServicesThis subcontract provides manufacturer-level technical support for Rustici Content Controller software to assist prime contractors working on the U.S. Coast Guard CG-OWL enterprise learning management system projects. Managed under the Department of Homeland Security's Special Mission Training Center, the contract ensures the operational capability of the CG-OWL system by utilizing Rustici Content Controller support infrastructure and delivering ongoing technical support entitlements. The services are governed by Rustici Software, LLC commercial support terms for U.S. Government customers and are categorized under NAICS code 541519. Performance for this engagement is centered in Norfolk, Virginia.

Special Mission Training Center (smtc)

POSTED

about 9 hours ago

DEADLINE

Cyber Security Engineering and Risk Management Framework Support

Solicitation # W91CRB-26-B-A006

Solicitation W91CRB-26-B-A006 is a Firm-Fixed-Price commercial services contract issued by the Army Contracting Command at Aberdeen Proving Ground, Maryland. The requirement is for Cybersecurity Engineering and Department of Defense Risk Management Framework (RMF) Support Services to maintain Authority to Operate (ATO) compliance at the Aberdeen Test Center. The contract is a 100% 8(a) set-aside, though some draft documents also reference Women-Owned Small Business (WOSB) and HUBZone preferences. The period of performance spans from November 23, 2026, to November 22, 2031, consisting of a base year and four option years, with an additional six-month extension option. The scope of work requires the contractor to provide all personnel, equipment, and non-personal services necessary for cybersecurity engineering, including labor for base and surge requirements totaling 4,080 hours per year. Key personnel requirements include a Senior IT Systems Solutions Architect/Contract Manager. Security requirements are stringent, requiring an active Secret Facility Security Clearance (FCL) at the time of bid submission, with specific positions requiring Top Secret clearances and access to SIPRNet and Special Access Programs (SAP). Award will be made to the lowest-priced, responsive, and responsible bidder based on a pass/fail responsiveness evaluation. Bidders must provide valid proof of facility clearance, personnel certifications compliant with DoDM 8140.03, and resumes for key labor categories. Bids are due electronically by November 5, 2026, and must be submitted as a single volume containing administrative documents, a completed pricing schedule, and security compliance documentation. Performance will be monitored via a Quality Assurance Surveillance Plan (QASP) and deliverables will be tracked through a Contract Data Requirements List (CDRL).

POSTED

about 9 hours ago

DEADLINE

DA10--Reviewed and Ready VISN Rad PACS - HL7 Conversion to DAS-SPOE

Solicitation # 36C25227Q0065

The Department of Veterans Affairs, through the VA Great Lakes Acquisition Center, intends to award a sole source, firm fixed price, one-time service contract to Change Healthcare Technologies/Optum. The scope of work involves the conversion to a DAS-SPOE HL7 interface for the CHC RAD PACS service. This procurement is conducted under the authority of 41 U.S.C. 1901 and FAR 12, based on the determination that Change Healthcare Technologies/Optum is the only responsible source capable of satisfying the requirements as they own and manufacture the necessary components and equipment already installed at the facility. The contractor is required to utilize certified authorized service technicians for the performance of these services. The project is categorized under NAICS code 541519 and will be performed within VISN 12. While this is a notice of intent for a sole source procurement, the government will consider capability statements from other firms that can demonstrate the ability to meet the requirements. Interested parties must submit detailed information regarding their products, services, and customer references via email in MS Word or Adobe PDF format to the contracting officer by 5:00 PM CST on October 23, 2026. The government maintains full discretion in determining whether to proceed with the sole source negotiation or to compete the procurement based on the responses received.

252-NETWORK Contract Office 12 (36C252)

POSTED

about 9 hours ago

DEADLINE

United States Army Western Hemisphere Command (USAWHC) G-6 Information Technology Service Management Western Command and Control System (WCCS)

Solicitation # 832674525

The United States Army Western Hemisphere Command (USAWHC) G-6 is issuing a Sources Sought Notice under solicitation 832674525 to identify capable small and large businesses to provide comprehensive Information Technology Service Management (ITSM) support for the Western Command and Control System (WCCS). The scope of work involves delivering and sustaining critical command and control, Unified Communications, Audio/Visual, and enterprise IT capabilities. Key functional requirements include service desk and information management operations for over 1,000 users, data center and network operations, and full-spectrum cybersecurity, specifically Risk Management Framework and Authority to Operate sustainment, vulnerability management, and COMSEC accountability. Additionally, the contractor must provide knowledge management solutions using Microsoft 365, SharePoint Online, and the Power Platform. The anticipated period of performance begins February 1, 2027, with a one-year base period and four option years. Primary performance locations include Fort Liberty and Camp Mackall in North Carolina, Joint Base San Antonio in Texas, with limited support at Fort Hood and Aberdeen Proving Ground, and potential travel to regional Deployable Communications Element locations. All personnel must hold at least a Secret security clearance, with some positions requiring Top Secret clearance, and those supporting partner nations in the SOUTHCOM area of responsibility must be professionally fluent in Spanish and Portuguese. The government is seeking capabilities from various socio-economic categories, including 8(a), SDVOSB, HUBZone, and Woman-Owned Small Businesses, under NAICS 541519. Interested respondents must submit a capabilities statement of no more than five pages by November 2, 2026.

It Contracting Division - PL83

POSTED

about 9 hours ago

DEADLINE

Regional OT Field Technician / Site LiaisonThis subcontract for a Regional OT Field Technician / Site Liaison involves providing on-site technical support and hardware connectivity for prime contractors working on Pakistan State Oil Company Limited projects. The scope of work is centered in Faisalabad, Keamari, and Machike, where the technician will manage physical access to control cabinets and server rooms, connect testing hardware to network ports, and monitor overall system stability during testing phases. The role requires strict adherence to oil and gas facility safety standards, necessitating site-specific HSE safety certifications. Key deliverables include the maintenance and delivery of site access logs. Interested parties should note the response deadline of November 4, 2026, for this specialized technical support engagement within Pakistan.

Pakistan State Oil Company Ltd

POSTED

about 14 hours ago

DEADLINE

OT VAPT Specialist (Industrial Control Systems)This subcontract opportunity is for an OT VAPT Specialist to provide vulnerability assessments and penetration testing for prime contractors working on automation projects for Pakistan State Oil Company Limited. The scope of work involves conducting both passive and active discovery of operational technology assets, utilizing OT-safe tools for vulnerability scanning, and performing controlled penetration testing on critical infrastructure including PLCs, HMIs, and SCADA systems. The final deliverable is a comprehensive VAPT Report that includes detailed risk ratings and actionable remediation recommendations. Qualified candidates must hold professional certifications such as GICSP or CISSP. The project is based in Pakistan and is categorized under NAICS code 541519. Interested parties must submit their responses by the deadline of November 4, 2026.

Pakistan State Oil Company Ltd

POSTED

about 14 hours ago

DEADLINE

More opportunities from Illinois → INFOTECH448 - Information Technology

Same awarding agency

Quality Assurance & Application TestingThis subcontract opportunity for Quality Assurance and Application Testing involves performing systematic testing of SAP enhancements and maintenance patches for prime contractors supporting the State of Illinois Department of Innovation and Technology. The selected provider will be responsible for creating test cases and managing testing artifacts through Microfocus ALM Quality Center, with final deliverables including test scripts, execution logs, and QA sign-off reports. The contract falls under NAICS code 541511 and requires the provider to hold an ISTQB or equivalent software testing certification. Interested parties must submit their responses by November 12, 2026, for this project managed by the Illinois Information Technology agency.

Custom Computer Programming Services

POSTED

about 1 month ago

DEADLINE

ERP Enhancement & Implementation (EPI)This subcontract opportunity with the Illinois Department of Innovation and Technology focuses on the design and deployment of functional enhancements and major version upgrades for prime contractors. The primary objective is to identify, build, and deploy Enhanced Process Improvements, specifically focusing on the implementation of S/4 for Finance utilizing SAP S/4HANA and SAP ECP. Successful delivery requires the provision of deployed S/4 Finance modules and updated Runbooks. Candidates must hold an S/4HANA Implementation certification to be eligible. The solicitation is managed by the Information Technology agency under NAICS code 541511, with a response deadline of November 12, 2026.

Custom Computer Programming Services

POSTED

about 1 month ago

DEADLINE

SAP GRC & Security AdministrationThis subcontract for SAP GRC and Security Administration supports the State of Illinois Department of Innovation and Technology by providing security management, role provisioning, and compliance monitoring. The scope of work includes managing SAP GRC Access Control and Process Control, overseeing role permissions, and offering Sailpoint go-live support. Key deliverables include the creation of user access matrices and the production of security audit reports. Qualified personnel must hold SAP GRC Certification along with recognized cybersecurity credentials such as CISSP or CISM. The opportunity is listed under NAICS code 541519 for the agency INFOTECH448 within the state of Illinois. Interested parties must respond by the deadline of November 12, 2026.

Other Computer Related Services

POSTED

about 1 month ago

DEADLINE

SAP Data Analytics & BI DevelopmentThis subcontract opportunity, titled SAP Data Analytics and BI Development, provides business intelligence, reporting solutions, and data transfer services for prime contractors working on projects for the State of Illinois Department of Innovation and Technology. The scope of work involves upgrading BODS for analytics and developing BI reports utilizing SAP BOBJ BusinessObjects BI Platform 4.3 and SAP BODS BusinessObjects Data Services to deliver analytics dashboards and upgraded environments. The contract is categorized under NAICS code 541511 and is managed by the Illinois agency INFOTECH448. Qualified providers must hold SAP BI/BW Certification to be eligible. The solicitation was posted on September 16, 2026, with a response deadline of November 12, 2026.

Custom Computer Programming Services

POSTED

about 1 month ago

DEADLINE

SAP Integration & Middleware ServicesThis subcontract for SAP Integration and Middleware Services supports the State of Illinois Department of Innovation and Technology by developing and maintaining data exchange layers between SAP and external systems. The scope of work involves creating integrations within Process Orchestrator and migrating integration flows to SAP Cloud Platform Integration utilizing Move IT Automation to deliver functional API and interface connections. The opportunity is listed under NAICS code 541511 with a response deadline of November 12, 2026. Qualified providers must hold specific professional credentials, including SAP CPI Certification and Integration Architect certifications, to ensure the technical requirements of the project are met.

Custom Computer Programming Services

POSTED

about 1 month ago

DEADLINE

SAP Technical Basis & Infrastructure ManagementThe SAP Technical Basis and Infrastructure Management subcontract supports the State of Illinois Department of Innovation and Technology by managing technical architecture, database layers, and overall system performance. The scope of work includes infrastructure management and database administration for SAP HANA Runtime DB, SAP HANA Enterprise DB, SAP NetWeaver, and SAP Sybase DB-ASE, with a focus on delivering critical system performance metrics and database health reports. Qualified providers must hold SAP Basis and HANA Database Administration certifications to perform these services. This opportunity is listed under NAICS code 541512 and is managed by the INFOTECH448 Information Technology agency. The response deadline for this subcontract is November 12, 2026.

Computer Systems Design Services

POSTED

about 1 month ago

DEADLINE

SAP Functional Support & Maintenance (M&O)This subcontract opportunity for SAP Functional Support and Maintenance involves providing ongoing application maintenance and operational support for prime contractors working on State of Illinois Department of Innovation and Technology projects. The scope of work includes troubleshooting Unique SAP ID issues and managing workflow roles for contracts and transactions utilizing SAP ECC, SAP SRM, and SAP S/4HANA. Qualified providers must hold SAP Certified Application Associate or Professional certifications in Finance or Procurement modules. Key deliverables include the resolution of incident tickets and the submission of Monthly Operations Reports. The solicitation is managed by the Illinois Information Technology agency under NAICS code 541513, with a response deadline of November 12, 2026.

Computer Facilities Management Services

POSTED

about 1 month ago

DEADLINE

ERP Production Support RFP

Solicitation # 26-448DOIT-INFOT-B-53319

The State of Illinois Department of Innovation and Technology is soliciting proposals for a ten-year contract to provide Maintenance and Operations (M&O) and Enhanced Process Improvement (EPI) support for its SAP ERP applications and modules. Commencing February 1, 2027, the contract covers a vast technical landscape including SAP SuccessFactors for HCM and various finance modules such as General Ledger, Accounts Payable, and Asset Accounting, serving 76 state agencies and the Illinois Toll Highway Authority. The scope of work encompasses continuous monitoring, troubleshooting, application enhancement, infrastructure management, and the maintenance of complex integrations, RPA bots, and advanced reporting tools utilizing HANA, BusinessObjects, and Tableau. The procurement utilizes a point ranking system with a maximum of 5,560 points, heavily weighted toward Technical (3,800 points) and Commitment to Diversity (800 points) factors. Only the top three ranked proposals will proceed to the price evaluation, which accounts for 960 points. The State seeks a fixed monthly rate for most services, excluding EPI project support. Awardees must adhere to strict security standards, including NIST SP 800-53 Rev 5 and data residency within the contiguous United States, while providing a dedicated staffing structure including a Service Delivery Director and various process area leads. All proposals must be submitted via the BidBuy portal by November 12, 2026.

Computer Systems Design Services

POSTED

about 1 month ago

DEADLINE

Enterprise Software Training & Documentation SpecialistThis subcontract opportunity for an Enterprise Software Training and Documentation Specialist focuses on the development of training materials and knowledge transfer for prime contractors involved in Illinois Capital Development Board projects. The selected provider will be responsible for creating user manuals, training guides for construction project management workflows, and a comprehensive training dataset that mirrors specific business processes. Additionally, the scope includes conducting end-user training sessions and delivering a fully configured training environment along with the associated curriculum. The project is managed by the Illinois Information Technology agency under NAICS code 611430. Interested parties must submit their responses by the deadline of October 28, 2026. This engagement is designed to ensure that all relevant stakeholders are proficient in the software and workflows required to successfully execute CDB projects.

Professional and Management Development Training

POSTED

about 1 month ago

DEADLINE

Cloud Hosting & Environment Management ProviderThe Cloud Hosting and Environment Management Provider subcontract, issued by the Illinois Information Technology agency, focuses on supplying and managing cloud infrastructure for prime contractors on Capital Development Board projects. The provider is responsible for provisioning and maintaining distinct Production, Test, and Training environments utilizing AWS, Azure, or GCP. Key operational requirements include monitoring application performance and capacity according to established SLAs, executing patch management, and overseeing automated data archiving to ensure a stable and scalable hosting environment. This opportunity, categorized under NAICS code 518210, was posted on September 8, 2026, with a response deadline of October 28, 2026. The selected provider must deliver consistent uptime reports and maintain the technical infrastructure necessary to support the agency's cloud-based operations.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 1 month ago

DEADLINE

Legacy Data Migration Specialist (Trimble & CDB Main)This subcontract opportunity with the Illinois Information Technology agency involves a Legacy Data Migration Specialist tasked with the extraction, transformation, and loading of historical construction data for prime contractors on Capital Development Board projects. The specialist will be responsible for mapping data fields from Trimble Unity Construct and CDB Main into new system structures, cleansing legacy data, and executing phased migration schedules using SQL and specialized ETL tools to ensure record accuracy. The primary objective is to deliver a fully migrated, searchable dataset containing both historical and active records. Interested parties must submit their responses by October 28, 2026, under NAICS code 541511.

Custom Computer Programming Services

POSTED

about 1 month ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS