Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Penetration testing

Awarded

693JJ320A000018_693JJ323F00304N_P00004Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Department of Transportation's IT Acquisition Center of Excellence is seeking a five-month extension of cybersecurity management support services under Blanket Purchase Agreement Order 693JJ320A000018_693JJ323F00304N. Awarded to Ernst and Young, the contract focuses on penetration testing activities for the Office of the Secretary to ensure mission-essential cybersecurity services and continued FISMA compliance. This extension will move the current expiration date from September 28, 2026, to February 28, 2027, providing necessary continuity while the Department restructures its IT workforce. Classified under NAICS code 541519, this action is being processed as a sole source justification and a logical follow-on to a competitively awarded GSA CSIPS BPA order in accordance with FAR 8.401(b). The performance is based in Washington, DC, and is managed by the IT Acquisition Center of Excellence.

General Info

Five-month cybersecurity support extension for Ernst and Young to ensure DOT FISMA compliance.

Agency

Department Of Transportation → It Acquisition Center Of Excellence (ace)

NAICS

541519 - Other Computer Related Services

Place of Performance

DC, 20590, USA

Set-Aside

NONE

Documents

1

Sole Source Justification - Order 693JJ320A000018_693JJ323F00304N

justification-and-authorization

Low

AI Contract Breakdown

Uniform Contract Format

Contract not broken down yet

CLEATUS splits the solicitation into Uniform Contract Format (UCF) sections: scope, pricing, deliverables, and evaluation criteria.

Timeline

PhaseAwarded

PostedSep 15

Justification (J&A)

AwardedOct 22

Contract was awarded

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Transportation → It Acquisition Center Of Excellence (ace)

Contacts2 people available

OfficeWashington, DC, 20590, USA

Organization / AgencyDepartment Of Transportation → It Acquisition Center Of Excellence (ace)

Office AddressWashington, DC, 20590, USA

Contacts

Khan Ajmal

contact@example.gov

Kyle Griggs

contact@example.gov

Full Description

Show more

The OCIO has a need to extend the cybersecurity management support services under Cyber Security Information & Program Services (CSIPS) Blanket Purchase Agreement (BPA) Order 693JJ320A000018_693JJ323F00304N awarded to Ernst and Young to support OST's penetration testing activity. The Order currently expires on 9/28/2026 and this request is to extend current levels of support for an additional five (5) months (through 2/28/27).

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance and Privacy AuditingThis subcontract for Cybersecurity Compliance and Privacy Auditing supports the Rhode Island Department of Health PDMP projects by providing security audits and privacy compliance oversight for prime contractors. The primary objective is to ensure strict adherence to HIPAA, 45 CFR Part 75, and Rhode Island General Laws, with a specific focus on auditing data privacy controls and verifying the absolute prohibition of offshore access. The scope of work includes validating Business Associate Agreement requirements to prevent the public disclosure of identifying elements and the delivery of detailed security audit reports. This engagement is managed under NAICS code 541519 for the State of Rhode Island, with a response deadline set for November 23, 2026.

State of Rhode Island

POSTED

about 7 hours ago

DEADLINE

in about 1 month

Technical Support & Managed Services (Help Desk)This subcontract opportunity involves providing comprehensive technical support and managed help desk services for prime contractors working on City of Atlanta Department of Watershed Management projects. The selected provider will deliver 24/7 on-screen and chat support specifically for data storage and integration systems, ensuring that all inquiries are addressed within two business days. Operations will be managed through the use of remote support software and formal ticketing systems to track and resolve issues. The scope of work requires the delivery of detailed technical support logs and the resolution of data-related inquiries. This engagement falls under NAICS code 541519 and is associated with the state of Georgia. Interested parties should note the response deadline of November 27, 2026, to be considered for these ongoing technical assistance services.

City of Atlanta

POSTED

about 8 hours ago

DEADLINE

in about 1 month

Managed Security Operations Center (SOC) and Cybersecurity ServicesThis subcontract for Managed Security Operations Center (SOC) and Cybersecurity Services supports prime contractors on Public Health Ontario projects. The scope of work involves providing continuous security monitoring, threat detection, and incident response through the operation of Managed SIEM and XDR platforms. Key technical requirements include performing vulnerability scanning, threat intelligence analysis, and the implementation of agentic AI within SOC operations to enhance efficiency and response capabilities. The service provider must adhere to the Ontario Provincial Cyber Security Operating Model (CSOM) and is responsible for delivering detailed threat reports and executing incident response actions. This opportunity is issued by the Government of Ontario for performance within Canada, with a response deadline set for November 23, 2026.

OAHPP (Public Health Ontario)

POSTED

about 9 hours ago

DEADLINE

in about 1 month

NIST SP 800-171 & DFARS Cybersecurity ComplianceThis subcontract opportunity with the Department of Defense, specifically for the W6QK Acc-Ri-Picatinny agency, focuses on implementing cybersecurity compliance for prime contractors working on Army DEVCOM Armaments Center projects. The primary objective is to ensure the protection of Controlled Unclassified Information through the development of System Security Plans and Plans of Action and Milestones in accordance with NIST SP 800-171 and DFARS 252.204-7012 standards. Technical requirements include the configuration of MFA, least-privilege access controls, and FIPS 140-2 validated cryptology, alongside the establishment of OPSEC standard operating procedures per AR 530-1. Performance will take place at Picatinny Arsenal under NAICS code 541519. Interested parties must respond by November 9, 2026, to provide the necessary approved security plans and documentation.

W6QK Acc-Ri-Picatinny

POSTED

about 10 hours ago

DEADLINE

AF-PLM Tier 1-3 Technical Support ServicesThe AF-PLM Tier 1-3 Technical Support Services subcontract provides comprehensive technical assistance for prime contractors working on US Air Force AF-PLM projects. The scope of work includes managing system functionality, engineering workflows, and data integration through the use of ITSM tools such as Jira Service Desk. The contractor is responsible for delivering Help Desk and Service Management Plans along with detailed monthly statistics to ensure operational transparency. Managed by the Department of Defense under agency FA8770 Aflcmc Gbk, the contract is based in Dayton, Ohio. It mandates strict adherence to service level agreements, requiring a response time within two hours and a resolution for critical issues within four hours. The opportunity is categorized under NAICS code 541519, with a response deadline set for November 5, 2026.

FA8770 Aflcmc Gbk

POSTED

about 10 hours ago

DEADLINE

PLM Cybersecurity and RMF Accreditation ServicesThe PLM Cybersecurity and RMF Accreditation Services subcontract, issued by the Department of Defense under agency FA8770 Aflcmc Gbk, focuses on implementing cybersecurity controls and Assessment and Authorization for prime contractors on US Air Force AF-PLM projects. The scope of work involves executing Risk Management Framework processes in accordance with DoDI 8500.01 and 8510.01, performing STIG compliance checks, and ensuring adherence to DFARS 252.204-7012 and NIST SP 800-171 standards. Key deliverables include the provision of STIG and Vulnerability Evidence Packages. Performance for this contract is based in Dayton, Ohio, and requires personnel to hold Secret and Top Secret clearances to support Cloud One IL6 and JWICS environments. Interested parties must note the response deadline of November 5, 2026. The project falls under NAICS code 541519, emphasizing specialized technical services for high-security government infrastructure.

FA8770 Aflcmc Gbk

POSTED

about 10 hours ago

DEADLINE

CAV RP Portal Reporting ServicesThe CAV RP Portal Reporting Services subcontract, issued by the Navsup Weapon Systems Support under the Department of Defense, involves performing mandatory reporting and data entry for prime contractors on Department of the Navy procurement projects. The selected provider will manage the flow of asset data and execute reporting through the Commercial Asset Visibility Repairables Portal using compatible data management software. Successful execution requires deep proficiency in CAV RP reporting requirements to ensure the delivery of accurate and timely reports. This opportunity falls under NAICS code 541519, with a response deadline set for November 23, 2026.

Navsup Weapon Systems Support

POSTED

about 10 hours ago

DEADLINE

in about 1 month

JISF and NIST Security Compliance ConsultingThe JISF and NIST Security Compliance Consulting subcontract involves providing security audits and compliance reporting for prime contractors working on Administrative Office of the US Courts projects. Based in Washington, the scope of work includes verifying secure transfer file system configurations, auditing JISF Access Controls and Communication Protection, and validating sanitization processes according to NIST SP 800-88 standards. The selected provider must deliver comprehensive security compliance reports, audit logs, and sanitization certificates. Additionally, all assigned personnel are required to pass AO suitability checks to ensure eligibility for the project. This opportunity is categorized under NAICS code 541519 and is managed by the Procurement Management Division of the Judicial Branch.

Aousc-Procurement Management Division

POSTED

about 10 hours ago

DEADLINE

Roche Immunostainer Software Upgrade and Training ServicesThe Roche Immunostainer Software Upgrade and Training Services subcontract involves providing specialized technical support for NIH/NCI laboratory projects. The scope of work focuses on installing software upgrades for Roche Ultra Plus immunostainers and maintaining VConnect software. Additionally, the contractor is responsible for conducting training sessions for NCI technologists to ensure proficiency in new software applications. This project requires qualified Roche IT Specialists to deliver updated software installations and ensure personnel are properly trained. The work is performed in Bethesda, Maryland, under the National Institutes of Health Olao within the Department of Health and Human Services. The contract is categorized under NAICS code 541519.

National Institutes Of Health Olao

POSTED

about 10 hours ago

DEADLINE

Virtual Learning Technology & Technical ProductionThis 8(a) sole source subcontract for the NASA Shared Services Center focuses on providing virtual learning technology and technical production services. The contractor is responsible for supplying enterprise-grade conferencing platforms, such as Zoom and Microsoft Teams, and providing dedicated technical producers to manage live sessions and resolve real-time issues. The primary goal is to ensure a stable and professional virtual classroom environment for prime contractors working on NASA training projects. Compliance is a critical component of this agreement, requiring strict adherence to NASA security standards and AI disclosure requirements as outlined in OMB memo M-25-22. The contract falls under NAICS code 541519 and was posted on October 22, 2026, with a response deadline of October 27, 2026.

NASA Shared Services Center

POSTED

about 10 hours ago

DEADLINE

Area of Interest (AOI) for User Activity Monitoring (UAM) Centralization Prototype Other Transaction (OT)

Solicitation # DISA-OTA-27-R-UAM

The Defense Information Systems Agency (DISA) is seeking prototypes for a centralized, multi-tenant User Activity Monitoring (UAM) solution to replace fractured and decentralized infrastructures within the Department of War. This effort, managed under solicitation DISA-OTA-27-R-UAM, aims to develop a scalable hybrid cloud and on-premises capability utilizing AI/ML. The resulting prototype must support secure multitenancy and data isolation across multiple networks, including NIPRNet, SIPRNet, JWICS, and SAP. This is a Prototype Other Transaction awarded under 10 U.S.C. 4022 and is not subject to the Federal Acquisition Regulations (FAR). The submission deadline for Phase 1 Solution Briefs is October 29, 2026, at 5:00 p.m. CDT. Proposals are evaluated based on their individual merits and their potential to rapidly enhance warfighter capability, with a preference for performance periods of three months or less. Mandatory requirements include CMMC Level 2 (Self) certification and a current NIST SP 800-171 Revision 2 self-assessment posted in the Supplier Performance Risk System. While Non-Traditional Defense Contractors with pending SAM.gov registrations may submit briefs, a fully validated registration, including a Unique Entity Identifier and CAGE code, is required prior to any agreement award. Deliverables for the selected performer will include a fully functional prototype and a complete Technical Data Package containing all software source code developed at government expense.

It Contracting Division - PL84

POSTED

about 10 hours ago

DEADLINE

FortiCare Support ProviderThis subcontract agreement establishes a partnership to provide manufacturer-backed technical support and maintenance subscriptions for network refresh projects managed by the Buffalo Board of Education. The selected provider must be an Authorized Fortinet Support Provider responsible for delivering active support contracts and licenses registered directly to the agency. The scope of work focuses on the provision of FortiCare support licenses to ensure continuous network coverage throughout the contract term via the Fortinet FortiCare Support System. This engagement is categorized under NAICS code 541519, emphasizing the requirement for specialized technical expertise in network maintenance and support.

Buffalo Board of Education

POSTED

about 18 hours ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS