Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Operational Technology (OT) Cybersecurity Policy Consultant

Open

State & Local

Response Deadline12/16/2026, 05:00:00 PM PST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Operational Technology (OT) Cybersecurity Policy Consultant subcontract involves the development of specialized cybersecurity policies for prime contractors working on Sacramento Municipal Utility District projects. The selected consultant will create policies for OT environments that align with the NIST Cybersecurity Framework, Risk Management Framework, and FERC CIP standards. This role requires deep technical expertise in SCADA and ICS systems to ensure utility environments are properly secured. The project requires all personnel to be based in the United States and mandates the signing of a non-disclosure agreement. The primary deliverable is a finalized set of cybersecurity policies tailored for OT solutions and systems. Interested parties must respond by December 17, 2026, for this engagement managed under NAICS code 541690.

General Info

Consultant will develop NIST and FERC compliant OT cybersecurity policies for SMUD projects.

Agency

California → Procurement Department of Sacramento Municipal Utility District

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

CA, USA

Set-Aside

NONE

Documents

This scope was carved out of RITM0125944.BT.

The full solicitation package (5 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Cybersecurity Master Services Agreement (MSA)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 6

subcontract

Response DeadlineDec 16

Submission deadline

Response Deadline

12/16/2026, 05:00:00 PM PSTin about 1 month

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia → Procurement Department of Sacramento Municipal Utility District

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia → Procurement Department of Sacramento Municipal Utility District

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs development of specialized cybersecurity policies for prime contractors on Sacramento Municipal Utility District (SMUD) projects. Creates policies for OT environments aligned with NIST Cybersecurity Framework, Risk Management Framework (RMF), and FERC CIP standards for utility environments. Requires expertise in SCADA and ICS systems. US-based personnel and NDA required. Delivers a finalized set of cybersecurity policies for OT solutions and systems.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project is for the Inland Empire Utilities Agency and involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services under RFP number RFP-VC-26-006. The opportunity is open to various certified entities, including SBA Small Businesses, Women-Owned Small Businesses, and SAM.gov designated Small Disadvantaged Businesses. Performance will take place in California under NAICS code 541690. Interested parties must respond by November 17, 2026, and can contact Jason Richards for further information.

AARC Consultants, LLC

POSTED

about 6 hours ago

DEADLINE

Statistical Analysis and Protocol Implementation ServicesThis subcontract for Statistical Analysis and Protocol Implementation Services supports prime contractors on medical product research projects for the Defense Health Agency. The selected provider will be responsible for the implementation and execution of specific research protocols and Statistical Analysis Plans to generate critical technical and management data for the Warfighter Protection and Acute Care PMO. The primary deliverables for this engagement include the fully implemented protocols and comprehensive statistical analysis reports. The work falls under NAICS code 541690 and is associated with the Department of Defense, with performance centered in the 21702 zip code area.

Defense Health Agency

POSTED

about 17 hours ago

DEADLINE

Clinical Data Management & De-identification ServicesThis subcontract for Clinical Data Management and De-identification Services supports prime contractors on NIH NIMHD projects under the Department of Health and Human Services. The primary scope of work involves the collection, cleaning, and securing of sensitive clinical data, including the extraction of information from Electronic Health Records and the processing of data from interviews and electronic surveys. The selected provider must deliver de-identified research datasets and comprehensive supporting documentation. Strict adherence to HIPAA compliance and the use of secure data handling environments are required to protect Protected Health Information. This opportunity falls under NAICS code 541690, with a response deadline of November 25, 2026.

National Institutes Of Health Nichd

POSTED

about 17 hours ago

DEADLINE

Privacy and Information Security AuditThe Privacy and Information Security Audit is a subcontract opportunity with the Department of Homeland Security, specifically supporting Investigations and Operations Support Dallas. The project focuses on auditing security and privacy controls for prime contractors on DHS/OHC projects, with a primary emphasis on evaluating access controls for sensitive records to ensure the principle of least privilege. The selected provider will audit data-handling practices against established DHS privacy and information-security requirements to identify and mitigate risks associated with the unauthorized disclosure of personally identifiable information. Performance of this contract will take place in Washington and requires specialized knowledge of DHS information-security directives. The final deliverable for this engagement is a comprehensive privacy and security risk assessment. Interested parties should note that the response deadline is November 27, 2026, and the work falls under NAICS code 541690.

Investigations And Operations Support Dallas

POSTED

about 17 hours ago

DEADLINE

CT Image Analysis and System TrainingThis subcontract opportunity, titled CT Image Analysis and System Training, is issued by the Fleet Readiness Center under the Department of Defense. The project requires a provider with subject matter expertise in CT X-Ray image analysis to deliver onsite technical training in San Diego for up to six government engineers and technicians working on NAVAIR projects. The scope of work includes instruction on theory of operation, image analysis, and hands-on system operation, specifically utilizing analysis-only viewer software. The selected contractor is responsible for delivering fully trained personnel and providing all necessary completion records. This requirement falls under NAICS code 541690. Interested parties should note the posting date of November 10, 2026, with a response deadline set for November 25, 2026.

Fleet Readiness Center

POSTED

about 17 hours ago

DEADLINE

Antiterrorism Program Assessment and Planning SupportThe Antiterrorism Program Assessment and Planning Support subcontract provides specialized antiterrorism services for prime contractors supporting US Army Acquisition Support Center projects in Gaithersburg. The scope of work involves conducting staff visits, inspections, and assessments of Portfolio Acquisition Executive operations and facilities. Key deliverables include the production of formal assessment reports and the maintenance of a long-range assessment calendar and tracking mechanisms for all findings. This opportunity is designated as an 8(a) set-aside under NAICS code 541690 for the Department of Defense. Due to the sensitive nature of the work, personnel must possess a Secret security clearance and US Army Antiterrorism Level II certification. Interested parties must respond by November 17, 2026.

POSTED

about 17 hours ago

DEADLINE

Acquisition Workforce Data Analytics and Metrics SupportThe Acquisition Workforce Data Analytics and Metrics Support subcontract involves providing specialized data analytics for prime contractors supporting Navsup Fleet Logistics Center Norfolk. The primary objective is to analyze AWF-specific data sets to create health metrics and reports that align with the digitize tenet of ASN(RDA) goals. Key deliverables include the production of analytical studies, health metric dashboards, and comprehensive data reports. This opportunity is designated as a total Small Business Set Aside under NAICS code 541690. Qualified candidates must possess a Secret security clearance and have proven experience working with AWF-specific data. The solicitation was posted on November 10, 2026, with a response deadline of November 16, 2026.

Navsup Flt Logistics Ctr Norfolk

POSTED

about 17 hours ago

DEADLINE

R--Technical Services Support

Solicitation # 89243126RSC000172

The Department of Energy Office of Science is soliciting a single contractor to provide comprehensive security support services in Oak Ridge, Tennessee. This 8(a) set-aside solicitation, under NAICS code 541690, supports the Office of Safety and Security, the Office of Science Consolidated Service Center, and the Oak Ridge Office of Environmental Management. The primary mission is to implement and administer Safeguards and Security programs to protect critical national security assets, including personnel, information, and Category I-IV Special Nuclear Material. The scope of work encompasses personnel security, industrial security, information security, and general program support, with a specific requirement to administer the personal identity verification and credentialing program under Homeland Security Presidential Directive-12. The contractor is responsible for providing a qualified Program Manager, designated as Key Personnel, and must implement a rigorous Quality Control Plan involving continuous measurements and inspections. Key deliverables include the quality assurance review of CSCS forms and the digitization of PSF and HSPD-12 files. All work must comply with DOE directives and federal, state, and local laws. Personnel must maintain appropriate access authorizations and manage various levels of sensitive data, including Classified Matter, Unclassified Controlled Nuclear Information, Export Controlled Information, and Personally Identifiable Information. The government will provide necessary workspace and access authorizations, while the contractor remains accountable for all safety and health program mandates.

Sc Oak Ridge Office

POSTED

about 17 hours ago

DEADLINE

Antiterrorism Support Services

Solicitation # PANAPG27P0000057143

The Department of Defense, through the US Army Acquisition Support Center, is seeking a contractor to provide non-personal Antiterrorism Program support. This 8(a) set-aside opportunity, under NAICS code 541690, requires the contractor to provide all necessary personnel, equipment, facilities, and supervision to perform assessment, planning, and policy development. Key personnel must have completed or be capable of completing the US Army Antiterrorism Level II course. The work will be performed at Fort Belvoir, Virginia, and requires strict adherence to security requirements, including FAR 52.204-2 for access to classified information and FAR 52.204-9 for personal identity verification. The contractor is responsible for delivering a Quality Control Plan within 30 days of award and must meet specific performance standards, including strict report accuracy and timeliness for pre-visit actions and final reports. The government maintains unlimited rights to all produced materials and software source codes. Additionally, the contractor must manage government property according to FAR 52.245-1 and implement a mitigation plan for any potential Organizational Conflict of Interest. Interested parties must submit a statement of relevant capability with performance examples, not exceeding ten pages, to the designated points of contact by November 17, 2026.

POSTED

about 17 hours ago

DEADLINE

Cybersecurity Validation and Vulnerability Testing

California Department of General Services

POSTED

about 21 hours ago

DEADLINE

in about 1 year

ADA/Section 508 Accessibility ConsultantThis subcontract opportunity is for an ADA/Section 508 Accessibility Consultant to provide specialized testing and remediation services for prime contractors working on North Dakota University System library projects. The selected consultant will be responsible for auditing web-based interfaces to ensure full compliance with Federal accessibility guidelines, the Americans with Disabilities Act, and the Rehabilitation Act. Technical evaluations will be conducted using screen readers and WAVE/Axe tools, with all remediation recommendations aligned with WCAG 2.1 standards. The primary deliverables for this engagement include a comprehensive accessibility compliance report and a final certification. Interested parties should note that the response deadline is December 4, 2026. This project falls under NAICS code 541690 and is focused on ensuring digital inclusivity and legal compliance for the state of North Dakota.

POSTED

about 23 hours ago

DEADLINE

Public Health Data Linkage and Analysis ServicesThe Public Health Data Linkage and Analysis Services subcontract involves providing technical data linkage and statistical analysis for prime contractors supporting CSTE and CDC public health projects. The selected provider will be responsible for developing analytic plans, executing the linkage of multiple jurisdictional data sources, and analyzing health outcomes specifically for people with disabilities. Technical execution requires proficiency in SAS, R, Stata, or Python, with a strict requirement to maintain HIPAA and 2 CFR 200 compliance throughout the project. Key deliverables for this engagement include a completed analytic plan, final linkage results, a project vignette, and materials for conference presentations. This opportunity is categorized under NAICS code 541690 and is associated with the Council of State and Territorial Epidemiologists. Interested parties must submit their responses by the deadline of December 5, 2026.

Council of State and Territorial Epidemiologists

POSTED

DEADLINE

More opportunities from California → Procurement Department of Sacramento Municipal Utility District

Same awarding agency

PCI-DSS Compliance SpecialistThis subcontract opportunity is for a PCI-DSS Compliance Specialist to provide documentation and submission services for prime contractors working on Sacramento Municipal Utility District projects. The selected provider will be responsible for preparing and assisting with annual Self-Assessment Questionnaires SAQ A and SAQ B, ensuring all submissions are coordinated with the acquiring bank in accordance with PCI-DSS requirements. The primary deliverable consists of the completed and submitted annual SAQ documents. Qualified candidates must utilize US-based personnel and adhere to a non-disclosure agreement, with QSA certification strongly recommended. Interested parties should note the response deadline of December 17, 2026. This engagement falls under NAICS code 541611 and is managed through the Procurement Department of the Sacramento Municipal Utility District in California.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month

Cybersecurity Master Services Agreement (MSA)

Solicitation # RITM0125944.BT

The Sacramento Municipal Utility District (SMUD) is soliciting proposals to establish a Cybersecurity Master Services Agreement (MSA) to secure a pool of qualified vendors capable of addressing evolving cybersecurity needs. The resulting contract will have an initial five-year term, with the possibility of extensions. This professional services agreement expressly excludes staff augmentation and focuses on specific deliverables, including the development of cybersecurity policies for operational technology (OT) solutions and maintaining PCI-DSS compliance through the submission of annual SAQ A and SAQ B documents. All work must adhere to the NIST Cybersecurity Framework, the Risk Management Framework (RMF), and FERC CIP standards. Award decisions will be based on a weighted evaluation prioritizing management and technical ability over price. Proposers must pass mandatory requirements and meet a minimum technical score threshold to be considered. Evaluation criteria include proposer experience and qualifications (30%), commercial terms and compliance (30%), category-specific experience (25%), SEED Program participation (10%), and environmental sustainability (5%). To ensure security, all tasks must be performed by US-based personnel with no offshore resources permitted. Successful contractors must execute a Non-Disclosure Agreement and provide insurance certificates within fifteen days of the award.

Computer Systems Design Services

POSTED

DEADLINE

in about 1 month

Gas Pipeline Flow Computer Replacements

Solicitation # RITM0126332.GH

The Sacramento Municipal Utility District (SMUD) is soliciting proposals under solicitation number RITM0126332.GH for the replacement of obsolete ABB Totalflow XFC flow computers at four specific sites: Campbells, Carson, Procter and Gamble, and CPP M&R stations. The project requires the contractor to provide engineering design, four new gas flow computers, on-site commissioning support, and 100 hours of remote technical support. A critical technical requirement is the integration of existing ABB NGC8206 gas chromatographs with the new hardware and the migration of communications from Modbus to DNP3 for SMUD's RTUs. Proposals are due by December 1, 2026, via the PlanetBids portal. Award decisions will be based on a weighted evaluation prioritizing management and technical ability over price, with additional points available for SEED-qualified prime proposers or those utilizing SEED subcontractors. Compliance requirements include adherence to California prevailing wage laws, CARB fleet requirements, and the submission of a Professional Services Security Plan. Successful bidders must also provide a Safety Compliance Certificate and execute a Confidentiality and Non-Disclosure Agreement.

Instruments and Related Products Manufacturing for Measuring, Displaying, and Controlling Industrial Process Variables

POSTED

DEADLINE

Remote Technical Support & Systems IntegrationThis subcontract involves providing remote technical support and systems integration for prime contractors working on Sacramento Municipal Utility District gas pipeline projects. The scope of work focuses on remote monitoring, the adjustment of flow calculation logic, and the troubleshooting of DNP3 communication links between flow computers and remote terminal units. Due to the nature of the work, the contractor must possess specialized expertise in industrial communication protocols and remote access security. The engagement requires the delivery of 100 hours of documented technical support. This opportunity is managed through the Procurement Department of the Sacramento Municipal Utility District in California under NAICS code 541512. Interested parties should note the response deadline of December 1, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Field Instrumentation Installation & CommissioningThis subcontract for Field Instrumentation Installation and Commissioning involves the on-site installation and commissioning of flow computers for prime contractors working on Sacramento Municipal Utility District gas pipeline projects. The scope of work includes replacing ABB Totalflow XFC units, wiring hardwired I/O and RTD temperature inputs, and integrating these units with ABB NGC8206 gas chromatographs to deliver fully operational systems across four separate stations. Due to the nature of the environment, personnel must hold certification for Class 1 Division 2 hazardous areas. The project is managed through the Procurement Department of the Sacramento Municipal Utility District, with a response deadline set for December 1, 2026.

Electrical Contractors and Other Wiring Installation Contractors

POSTED

DEADLINE

Gas Flow Computer SupplyThis subcontract involves the supply of four commissioned-ready specialized gas flow computers for prime contractors working on Sacramento Municipal Utility District gas pipeline projects. The required hardware must feature 10-30VDC power, specific discrete and analog I/O capabilities, and full compatibility with Instromet Q.SONIC-3 ultrasonic flow meters. To ensure safety and regulatory compliance, all equipment must be rated Class 1 Division 2 under the National Electric Code. Managed by the Procurement Department of the Sacramento Municipal Utility District in California, this opportunity falls under NAICS code 334510. The solicitation was posted on October 29, 2026, with a response deadline set for December 1, 2026.

Electromedical and Electrotherapeutic Apparatus Manufacturing

POSTED

DEADLINE

Industrial Control Systems (ICS) Engineering & DesignThis subcontract for Industrial Control Systems Engineering and Design involves providing specialized engineering services for flow computer replacements on Sacramento Municipal Utility District gas pipeline projects. The scope of work focuses on transitioning communications from Modbus to DNP3 and developing complex logic for mathematical equations, time delays, and Boolean functions. Additionally, the contractor is responsible for creating detailed integration maps for temperature, pressure, flow, and gas chromatograph data. The final deliverable for this engagement is a comprehensive engineering design package consisting of all necessary specifications and drawings. This project falls under NAICS code 541330 and is managed through the Procurement Department of the Sacramento Municipal Utility District. Interested parties must adhere to the response deadline of December 1, 2026.

Engineering Services

POSTED

DEADLINE

DISTRIBUTION TRANSFORMERS REQUEST FOR PROPOSAL

Solicitation # 243846

The Sacramento Municipal Utility District (SMUD) has issued solicitation number 243846 to select one or more vendors for a multi-year contract to provide single-phase and three-phase pad-mount and pole-mount distribution transformers. The contract period is scheduled from January 1, 2027, through December 31, 2029, with a not-to-exceed aggregate value of 100,000,000 dollars. All equipment must adhere to SMUD Engineering specifications DS1406, DS1407, and DS1408. The primary objective is to secure a partner capable of delivering quality transformers in an efficient manner at the most economical overall cost. Successful proposers must demonstrate a strong national presence and possess the technical capability to supply the full range of transformers specified in the bid schedules. Requirements include having experienced managers and engineers on staff, trained personnel for facility testing, and the ability to produce drawings in the latest AutoCAD format. Operationally, vendors must implement a formal quality assurance and control procedure, provide a customer support system for troubleshooting, and participate in Supplier Relationship Management. Additionally, the selected vendor must establish a capacity plan to dedicate manufacturing space for SMUD, with the flexibility for SMUD to adjust these requirements with 90 days' notice. Proposals must be submitted exclusively through the Power Advocate Supply Chain Intelligence Platform, with specific data required across tabs for proposal uploads, commercial data, technical data, and pricing. The response deadline is December 3, 2026. Once awarded, the vendor or their representative is required to meet with SMUD's contract administrator weekly to review stock levels and determine release quantities for subsequent 30-day periods.

Power, Distribution, and Specialty Transformer Manufacturing

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS