Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

NIST SP 800-171 & DFARS Cybersecurity Compliance

Active

Federal

Response Deadline11/09/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity with the Department of Defense, specifically for the W6QK Acc-Ri-Picatinny agency, focuses on implementing cybersecurity compliance for prime contractors working on Army DEVCOM Armaments Center projects. The primary objective is to ensure the protection of Controlled Unclassified Information through the development of System Security Plans and Plans of Action and Milestones in accordance with NIST SP 800-171 and DFARS 252.204-7012 standards. Technical requirements include the configuration of MFA, least-privilege access controls, and FIPS 140-2 validated cryptology, alongside the establishment of OPSEC standard operating procedures per AR 530-1. Performance will take place at Picatinny Arsenal under NAICS code 541519. Interested parties must respond by November 9, 2026, to provide the necessary approved security plans and documentation.

General Info

DoD subcontract for NIST 800-171 cybersecurity compliance at Picatinny Arsenal by November 2026.

Agency

Department Of Defense → W6QK Acc-Ri-Picatinny

NAICS

541519 - Other Computer Related Services

Place of Performance

Picatinny Arsenal, NJ, 07806, USA

Set-Aside

NONE

Documents

This scope was carved out of W15QKN-27-R-1CQD.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

NGATS SOFTWARE SUPPORT

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 22

subcontract

Response DeadlineNov 9

Submission deadline

Response Deadline

11/09/2026, 09:00:00 PM UTCin 18 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → W6QK Acc-Ri-Picatinny

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → W6QK Acc-Ri-Picatinny

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implements cybersecurity compliance for prime contractors on Army DEVCOM Armaments Center projects. Develops System Security Plans (SSP) and POAMs per NIST SP 800-171 and DFARS 252.204-7012. Configures FIPS 140-2 validated cryptology, MFA, and least-privilege access controls. Establishes OPSEC SOPs per AR 530-1. Delivers approved SSP, POAM, and OPSEC Plan to ensure protection of Controlled Unclassified Information (CUI).

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance and Privacy AuditingThis subcontract for Cybersecurity Compliance and Privacy Auditing supports the Rhode Island Department of Health PDMP projects by providing security audits and privacy compliance oversight for prime contractors. The primary objective is to ensure strict adherence to HIPAA, 45 CFR Part 75, and Rhode Island General Laws, with a specific focus on auditing data privacy controls and verifying the absolute prohibition of offshore access. The scope of work includes validating Business Associate Agreement requirements to prevent the public disclosure of identifying elements and the delivery of detailed security audit reports. This engagement is managed under NAICS code 541519 for the State of Rhode Island, with a response deadline set for November 23, 2026.

State of Rhode Island

POSTED

about 5 hours ago

DEADLINE

in about 1 month

Technical Support & Managed Services (Help Desk)This subcontract opportunity involves providing comprehensive technical support and managed help desk services for prime contractors working on City of Atlanta Department of Watershed Management projects. The selected provider will deliver 24/7 on-screen and chat support specifically for data storage and integration systems, ensuring that all inquiries are addressed within two business days. Operations will be managed through the use of remote support software and formal ticketing systems to track and resolve issues. The scope of work requires the delivery of detailed technical support logs and the resolution of data-related inquiries. This engagement falls under NAICS code 541519 and is associated with the state of Georgia. Interested parties should note the response deadline of November 27, 2026, to be considered for these ongoing technical assistance services.

City of Atlanta

POSTED

about 6 hours ago

DEADLINE

in about 1 month

Managed Security Operations Center (SOC) and Cybersecurity ServicesThis subcontract for Managed Security Operations Center (SOC) and Cybersecurity Services supports prime contractors on Public Health Ontario projects. The scope of work involves providing continuous security monitoring, threat detection, and incident response through the operation of Managed SIEM and XDR platforms. Key technical requirements include performing vulnerability scanning, threat intelligence analysis, and the implementation of agentic AI within SOC operations to enhance efficiency and response capabilities. The service provider must adhere to the Ontario Provincial Cyber Security Operating Model (CSOM) and is responsible for delivering detailed threat reports and executing incident response actions. This opportunity is issued by the Government of Ontario for performance within Canada, with a response deadline set for November 23, 2026.

OAHPP (Public Health Ontario)

POSTED

about 7 hours ago

DEADLINE

in about 1 month

AF-PLM Tier 1-3 Technical Support ServicesThe AF-PLM Tier 1-3 Technical Support Services subcontract provides comprehensive technical assistance for prime contractors working on US Air Force AF-PLM projects. The scope of work includes managing system functionality, engineering workflows, and data integration through the use of ITSM tools such as Jira Service Desk. The contractor is responsible for delivering Help Desk and Service Management Plans along with detailed monthly statistics to ensure operational transparency. Managed by the Department of Defense under agency FA8770 Aflcmc Gbk, the contract is based in Dayton, Ohio. It mandates strict adherence to service level agreements, requiring a response time within two hours and a resolution for critical issues within four hours. The opportunity is categorized under NAICS code 541519, with a response deadline set for November 5, 2026.

FA8770 Aflcmc Gbk

POSTED

about 8 hours ago

DEADLINE

PLM Cybersecurity and RMF Accreditation ServicesThe PLM Cybersecurity and RMF Accreditation Services subcontract, issued by the Department of Defense under agency FA8770 Aflcmc Gbk, focuses on implementing cybersecurity controls and Assessment and Authorization for prime contractors on US Air Force AF-PLM projects. The scope of work involves executing Risk Management Framework processes in accordance with DoDI 8500.01 and 8510.01, performing STIG compliance checks, and ensuring adherence to DFARS 252.204-7012 and NIST SP 800-171 standards. Key deliverables include the provision of STIG and Vulnerability Evidence Packages. Performance for this contract is based in Dayton, Ohio, and requires personnel to hold Secret and Top Secret clearances to support Cloud One IL6 and JWICS environments. Interested parties must note the response deadline of November 5, 2026. The project falls under NAICS code 541519, emphasizing specialized technical services for high-security government infrastructure.

FA8770 Aflcmc Gbk

POSTED

about 8 hours ago

DEADLINE

CAV RP Portal Reporting ServicesThe CAV RP Portal Reporting Services subcontract, issued by the Navsup Weapon Systems Support under the Department of Defense, involves performing mandatory reporting and data entry for prime contractors on Department of the Navy procurement projects. The selected provider will manage the flow of asset data and execute reporting through the Commercial Asset Visibility Repairables Portal using compatible data management software. Successful execution requires deep proficiency in CAV RP reporting requirements to ensure the delivery of accurate and timely reports. This opportunity falls under NAICS code 541519, with a response deadline set for November 23, 2026.

Navsup Weapon Systems Support

POSTED

about 8 hours ago

DEADLINE

in about 1 month

JISF and NIST Security Compliance ConsultingThe JISF and NIST Security Compliance Consulting subcontract involves providing security audits and compliance reporting for prime contractors working on Administrative Office of the US Courts projects. Based in Washington, the scope of work includes verifying secure transfer file system configurations, auditing JISF Access Controls and Communication Protection, and validating sanitization processes according to NIST SP 800-88 standards. The selected provider must deliver comprehensive security compliance reports, audit logs, and sanitization certificates. Additionally, all assigned personnel are required to pass AO suitability checks to ensure eligibility for the project. This opportunity is categorized under NAICS code 541519 and is managed by the Procurement Management Division of the Judicial Branch.

Aousc-Procurement Management Division

POSTED

about 8 hours ago

DEADLINE

Roche Immunostainer Software Upgrade and Training ServicesThe Roche Immunostainer Software Upgrade and Training Services subcontract involves providing specialized technical support for NIH/NCI laboratory projects. The scope of work focuses on installing software upgrades for Roche Ultra Plus immunostainers and maintaining VConnect software. Additionally, the contractor is responsible for conducting training sessions for NCI technologists to ensure proficiency in new software applications. This project requires qualified Roche IT Specialists to deliver updated software installations and ensure personnel are properly trained. The work is performed in Bethesda, Maryland, under the National Institutes of Health Olao within the Department of Health and Human Services. The contract is categorized under NAICS code 541519.

National Institutes Of Health Olao

POSTED

about 8 hours ago

DEADLINE

Virtual Learning Technology & Technical ProductionThis 8(a) sole source subcontract for the NASA Shared Services Center focuses on providing virtual learning technology and technical production services. The contractor is responsible for supplying enterprise-grade conferencing platforms, such as Zoom and Microsoft Teams, and providing dedicated technical producers to manage live sessions and resolve real-time issues. The primary goal is to ensure a stable and professional virtual classroom environment for prime contractors working on NASA training projects. Compliance is a critical component of this agreement, requiring strict adherence to NASA security standards and AI disclosure requirements as outlined in OMB memo M-25-22. The contract falls under NAICS code 541519 and was posted on October 22, 2026, with a response deadline of October 27, 2026.

NASA Shared Services Center

POSTED

about 8 hours ago

DEADLINE

Area of Interest (AOI) for User Activity Monitoring (UAM) Centralization Prototype Other Transaction (OT)

Solicitation # DISA-OTA-27-R-UAM

The Defense Information Systems Agency (DISA) is seeking prototypes for a centralized, multi-tenant User Activity Monitoring (UAM) solution to replace fractured and decentralized infrastructures within the Department of War. This effort, managed under solicitation DISA-OTA-27-R-UAM, aims to develop a scalable hybrid cloud and on-premises capability utilizing AI/ML. The resulting prototype must support secure multitenancy and data isolation across multiple networks, including NIPRNet, SIPRNet, JWICS, and SAP. This is a Prototype Other Transaction awarded under 10 U.S.C. 4022 and is not subject to the Federal Acquisition Regulations (FAR). The submission deadline for Phase 1 Solution Briefs is October 29, 2026, at 5:00 p.m. CDT. Proposals are evaluated based on their individual merits and their potential to rapidly enhance warfighter capability, with a preference for performance periods of three months or less. Mandatory requirements include CMMC Level 2 (Self) certification and a current NIST SP 800-171 Revision 2 self-assessment posted in the Supplier Performance Risk System. While Non-Traditional Defense Contractors with pending SAM.gov registrations may submit briefs, a fully validated registration, including a Unique Entity Identifier and CAGE code, is required prior to any agreement award. Deliverables for the selected performer will include a fully functional prototype and a complete Technical Data Package containing all software source code developed at government expense.

It Contracting Division - PL84

POSTED

about 8 hours ago

DEADLINE

FortiCare Support ProviderThis subcontract agreement establishes a partnership to provide manufacturer-backed technical support and maintenance subscriptions for network refresh projects managed by the Buffalo Board of Education. The selected provider must be an Authorized Fortinet Support Provider responsible for delivering active support contracts and licenses registered directly to the agency. The scope of work focuses on the provision of FortiCare support licenses to ensure continuous network coverage throughout the contract term via the Fortinet FortiCare Support System. This engagement is categorized under NAICS code 541519, emphasizing the requirement for specialized technical expertise in network maintenance and support.

Buffalo Board of Education

POSTED

about 16 hours ago

DEADLINE

Cybersecurity Professional ServicesThis subcontract for Cybersecurity Professional Services involves providing security assessments and vulnerability management for prime contractors working on Port Authority of New York and New Jersey projects. The scope of work includes conducting penetration tests, implementing security protocols, and utilizing SIEM tools and vulnerability scanners to prepare comprehensive compliance audits. The selected provider will be responsible for delivering detailed security audit reports and actionable remediation plans. Qualified candidates must possess deep knowledge of the NIST framework and hold professional certifications such as CISSP or CISM. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 13, 2026.

The Port Authority of New York and New Jersey

POSTED

about 16 hours ago

DEADLINE

More opportunities from Department Of Defense → W6QK Acc-Ri-Picatinny

Same awarding agency

NGATS Sustaining Engineering and TroubleshootingThis subcontract, titled NGATS Sustaining Engineering and Troubleshooting, supports prime contractors on Army DEVCOM Armaments Center projects at Picatinny Arsenal. The scope of work focuses on sustaining engineering for the NGATS platform, which includes troubleshooting latent defects, mitigating obsolescence risks, and managing software updates. Key deliverables include the deployment of quarterly software patches, annual system software releases, and the provision of Software Version Descriptions. Technical execution requires the use of Team Forge and MEARS, with a specific mandate to conduct Software Functional and Physical Configuration Audits in accordance with MIL-STD-31000B. Managed under NAICS code 541330 for the Department of Defense, the contract ensures the continued operational viability and configuration control of critical armaments software systems.

Engineering Services

POSTED

about 8 hours ago

DEADLINE

Common Operator Test Environment (COTE) DevelopmentThis subcontract opportunity with the Department of Defense, specifically W6QK Acc-Ri-Picatinny, involves the development of the Common Operator Test Environment (COTE) for prime contractors working on Army DEVCOM Armaments Center projects. The scope of work focuses on software design and coding to ensure COTE compatibility with Visual Studio 2017, integration with the NGATS platform, and necessary updates to the Test Description Interface and Regression Analysis Software. The selected provider must hold CMMI-SE/SW/SS V 2.0 certification and is responsible for delivering functional software, complete source code, and all associated technical documentation. Performance will take place at Picatinny Arsenal, and responses are due by November 9, 2026.

Custom Computer Programming Services

POSTED

about 8 hours ago

DEADLINE

NGATS SOFTWARE SUPPORT

Solicitation # W15QKN-27-R-1CQD

The Army Contracting Command Rock Island at Picatinny, on behalf of the U.S. Army Automated Test Systems Division, is conducting market research to identify potential sources for Next Generation Automated Test System (NGATS) System Software Support. The objective is to secure a vendor to provide sustaining engineering and technical support, including the development of a Common Operator Test Environment compatible with Visual Studio code. The scope involves maintaining the NGATS software baseline through recurring updates, performance enhancements, and troubleshooting for latent defects and obsolescence issues to ensure continuous readiness and a strong cybersecurity posture. This effort is anticipated as a Firm-Fixed-Price contract with an estimated period of performance of 12 months. Key deliverables include at least one complete system software release and quarterly software patches, with all source code and documentation submitted via Team Forge. The contractor must adhere to strict security standards, including NIST SP 800-171, DFARS 252.204-7012 for safeguarding covered defense information, and FIPS 140-2 validated cryptology. Work will be performed at the contractor's facility, and personnel requiring Common Access Cards must have a favorable National Agency Check with Inquiries. The acquisition is categorized under NAICS code 541330 for Engineering Services and Product Service Code R425.

Engineering Services

POSTED

about 8 hours ago

DEADLINE

Multi-Role Adaptive Design (MRAD), MK 22 Precision Sniper Rifle (PSR)

Solicitation # W15QKN27RA002

Small Arms, Ordnance, and Ordnance Accessories Manufacturing

POSTED

about 8 hours ago

DEADLINE

BAA DEVCOM AC Emerging Technologies

Solicitation # W15QKN-26-S-1AZR

The U.S. Army Combat Capabilities Development Command Armaments Center is soliciting research proposals and white papers for new and innovative technologies related to emerging weapons, munitions systems, and soldier lethality. Issued under FAR 6.102(d)(2), this Broad Agency Announcement is a continuously open solicitation effective from March 5, 2026, through March 4, 2031. The program seeks to advance the state of the art through collaborations with industry and academia, with a particular interest in scientific study and experimentation that fills technology needs across the product life cycle, including improvements in armament packaging, ammunition logistics, and micro-system architecture. The submission process is a two-stage effort beginning with a white paper, which is limited to six pages plus a cover page and biographical sketches. Offerors whose white papers are favorably evaluated may be invited to submit a full research proposal. The government prefers proposals covering a three-year period of performance with incremental funding. Awards are based on a competitive selection process evaluating overall scientific and technical merit, potential contributions to the Army mission, offeror capabilities, personnel qualifications, past performance, and proposed price. All submissions must be unclassified and adhere to strict formatting guidelines, including 12-point Times New Roman font for narrative text.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

about 8 hours ago

DEADLINE

in over 4 years

Manufacture of M284A2 155mm and other MTC Cannon Tubes

Solicitation # W15QKN-27-X-1CTG

POSTED

DEADLINE

in about 1 month

FY27-31 WC864 Ball Powder

Solicitation # W15QKN26RA085

The Department of Defense, specifically the W6QK Acc-Ri-Picatinny office located at Picatinny Arsenal, New Jersey, is soliciting bids for the FY27-31 WC864 Ball Powder contract. This combined type procurement falls under NAICS code 325920 and is managed by the Army. Interested parties must submit their responses by the deadline of October 30, 2026. Primary coordination for this opportunity is handled by Gina Cuiffo, with Bethany Ficacci-Kretzmer serving as the secondary point of contact.

Explosives Manufacturing

POSTED

DEADLINE

9mm M1041 Close Combat Mission Capability Kit (CCMCK)

Solicitation # W15QKN27RA009

Solicitation W15QKN27RA009 is a request for proposal issued by the U.S. Army Contracting Command - Rock Island at Picatinny for the procurement of 9mm M1041 Practice Ammunition Cartridges in blue and red. These cartridges are designed for use with the Close Combat Mission Capability Kit (CCMCK) weapon conversion systems for the M9, M11, and M4 Carbine. The government intends to award a single Indefinite Delivery Indefinite Quantity (IDIQ) contract with a minimum guarantee of $130,000 and a maximum ceiling of $26,000,000. The contract structure consists of five one-year ordering periods utilizing Firm Fixed Price delivery orders. The successful contractor must maintain a monthly combined production rate of 500,000 cartridges and adhere to performance specification MIL-PRF-32312 and Drawing Number 13008817. Award will be based on a best-value integrated assessment, prioritizing technical factors, past performance, price, and small business participation in descending order of importance. Technical evaluation includes bid sample testing, manufacturing, quality assurance, and management plans. The contract mandates strict quality and security standards, including ISO 9001:2015 certification, CMMC Level 2 compliance, and adherence to DOD 5100.76-M for the storage and accountability of sensitive Arms, Ammunition, and Explosives. Deliveries are FOB Origin, with inspection and acceptance occurring at both the contractor's facility and the destination at Picatinny Arsenal. Key requirements include the successful completion of First Article Testing and the submission of Measurement System Evaluations for government approval.

Small Arms Ammunition Manufacturing

POSTED

DEADLINE

in about 1 month

Electronic Safe and Arm Devices (ESAD)

Solicitation # W15QKN27A9999

The U.S. Army Contracting Command-Rock Island at Picatinny is conducting market research to identify domestic sources capable of manufacturing Electronic Safe and Arm Devices (ESAD) fuzes and Ignition Safety Devices (ISD) for rocket motors. This Request for Information seeks to evaluate the industrial base's capacity to scale production for high-rate defense requirements, including weaponized unmanned aircraft systems, counter-UAS technologies, and other low-cost, high-rate systems. The government is specifically interested in identifying supply chain bottlenecks for critical components such as high-voltage firing capacitors, solid-state high-voltage switches, and various in-line initiators. Interested companies based in the Continental United States must provide detailed information regarding their past performance over the last five years, existing manufacturing infrastructure, and their ability to surge production between fiscal years 2027 and 2031. Responses should outline technical competencies, workforce certifications, and the ability to handle controlled unclassified or classified information. This is a voluntary request for information for market research purposes only and does not constitute a formal request for proposal or a commitment to award a contract. Submissions must be received by November 19, 2026.

Ammunition (except Small Arms) Manufacturing

POSTED

DEADLINE

155mm Modular Artillery for Combat Effectiveness (MACE)

Solicitation # W15QKN26R1C5R

The 155mm Modular Artillery for Combat Effectiveness (MACE) program, managed by the U.S. Army Contracting Command – Rock Island at Picatinny, is a solicitation for up to two prototype Other Transaction Agreements (OTAs) under 10 U.S.C. § 4022. The objective is to develop a manufacturable 155mm cargo-carrying artillery projectile system designed to expand domestic manufacturing capacity and modular payload capabilities. The project is structured in two phases: Phase I focuses on projectiles achieving a range of 30 to 35 km, while Phase II targets ranges exceeding 35 km. The prototypes must be compatible with M777A2 Lightweight Towed and M109A7 Paladin 39-caliber weapon platforms, with future adaptability for 52 or 55 caliber systems. Successful prototype completion may lead to a follow-on production contract of up to 10,000 systems per year, supporting a Milestone C production decision by the fourth quarter of FY29. The procurement process involves rigorous technical and administrative requirements, including the submission of a detailed Integrated Master Schedule (IMS) and a cost proposal based on FAR cost principles. Evaluation for Phase I prioritizes the schedule, while Phase II emphasizes technical design and technology maturity. Offerors must certify their business status, specifically regarding nontraditional defense contractor eligibility, and comply with the Buy America Act and National Technology and Industrial Base restrictions. Access to controlled technical data, such as purchase descriptions and drawings, requires the submission of a Non-Disclosure Agreement and a Military Critical Technical Data Agreement. The final response deadline for proposals was extended to October 30, 2026, with submissions required via SAM.gov in specific stand-alone volumes.

Ammunition (except Small Arms) Manufacturing

POSTED

DEADLINE

Hexagon Coordinate Measurement Machines (CMM) Preventative Hardware, Software Maintenance and Repair Services to the DEVCOM-AC Quality Engineering & Systems Assurance (QE&SA) laboratory

Solicitation # W15QKN26RA097

The U.S. Army Contracting Command Rock Island at Picatinny is soliciting firm-fixed-price quotes for Hexagon Coordinate Measurement Machine (CMM) preventative hardware, software maintenance, and repair services. This requirement supports the DEVCOM-AC Quality Engineering and Systems Assurance laboratory at Picatinny Arsenal, New Jersey. The procurement is a 100 percent sole source brand-name requirement restricted to Hexagon Metrology Corporation under the authority of 41 U.S.C. 1901. The scope of work includes a one-year Hexagon MyCare Hardware Preventative Maintenance and Calibration Agreement, software upgrades, system calibration, helpdesk support, and a parts blanket for five CMMs and one Portable CMM. The contract structure consists of a 12-month base year with four 12-month option years. Performance includes annual multi-point inspections and calibrations adhering to ISO, ASME, and OSHA standards. Award will be based on a best-value tradeoff evaluation, prioritizing a technical factor comprising technical approach and personnel experience over price. Deliverables include calibration certifications, training materials, and COTS manuals. All work is unclassified, though contractor personnel must complete Anti-Terrorism Awareness Level I training to access the installation.

Electronic and Precision Equipment Repair and Maintenance

POSTED

DEADLINE

in about 23 hours

Solicitation # W15QKN27A1CSD

The U.S. Army Combat Capabilities Development Command Armaments Center is conducting market research to identify manufacturers capable of producing high-grade Pentolite. This sensitive secondary high explosive is required for Naval Ordinance Laboratory Large and Extra-Large Scale Card Gap Tests to meet AOP-7 and DoW specifications. The government is specifically looking for vendors under NAICS 325920 and PSC 1375 who can provide material that exceeds the quality of standard commercial mining and blasting explosives. This sources sought notice is for informational purposes only and does not constitute a formal solicitation or a commitment to award a contract. Interested vendors must be registered in the System for Award Management and are encouraged to submit a capabilities statement including historical performance data, company details, and proof of ability to meet technical specifications. All responses must be submitted electronically to the U.S. Army Contracting Command Rock Island at Picatinny by November 16, 2026.

Explosives Manufacturing

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS