Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Privacy and Security IT Safeguards Assessment

Active

State & Local

Response Deadline11/06/2026, 09:30:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract, titled Privacy and Security IT Safeguards Assessment, is issued by the Vermont Department of Economic Development. The selected provider will perform specialized IT safeguard audits for prime contractors working on Vermont Health Access projects. The primary objective is to evaluate privacy and security IT controls to ensure the protection of sensitive data and the integrity of enrollment transactions. The scope of work requires the use of professional IT audit tools and adherence to established compliance frameworks such as HIPAA or NIST. To qualify, the contractor must hold a CISA certification or an equivalent IT audit credential. The final deliverables consist of detailed findings and assessments that will be integrated into the Programmatic Compliance Audit Report. The response deadline for this opportunity is November 6, 2026.

General Info

Vermont DED seeks CISA-certified providers for IT safeguard audits due November 6, 2026.

Agency

Vermont → Department of Economic Development

NAICS

541519 - Other Computer Related Services

Place of Performance

VT, USA

Set-Aside

NONE

Documents

This scope was carved out of 03410-255-27.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Programmatic and Financial Audits 45 CFR 155

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 20

subcontract

Response DeadlineNov 6

Submission deadline

Response Deadline

11/06/2026, 09:30:00 AM UTCin 16 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyVermont → Department of Economic Development

ContactsNo contacts available

OfficeN/A

Organization / AgencyVermont → Department of Economic Development

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs specialized IT safeguard audits for prime contractors on Vermont Health Access projects. Evaluates privacy and security IT controls to ensure enrollment transaction integrity and sensitive data protection. Utilizes IT audit tools and compliance frameworks such as NIST or HIPAA. Requires CISA certification or equivalent IT audit credential. Delivers findings and assessments for integration into the Programmatic Compliance Audit Report.

Similar Contracts

Same NAICS industry code

Cybersecurity & System Hardening SpecialistThis subcontract opportunity for a Cybersecurity and System Hardening Specialist supports prime contractors on projects for the State Corporation Commission of Virginia. The scope of work focuses on security architecture design and system hardening, specifically through the implementation of identity security, endpoint protection, secure data transmission, and encryption of data at rest. The selected provider will be responsible for ensuring all systems meet SOC 2 or ISO 00 compliance standards and establishing robust audit logging. Key deliverables include a fully hardened system environment, detailed security configuration reports, and established encryption protocols. The project is categorized under NAICS code 541519 and allows for performance at the supplier's site. Interested parties must submit their responses by November 20, 2026.

State Corporation Commission

POSTED

about 16 hours ago

DEADLINE

in about 1 month

SaaS Implementation and User Support ServicesThe SaaS Implementation and User Support Services subcontract focuses on providing technical onboarding, training, and continuous support for prime contractors working on software projects for the Teacher Retirement System of Texas. The scope of work includes account management, the creation of comprehensive training resources, and the delivery of technical troubleshooting and user access management. These tasks are to be executed using remote support tools and help desk software, with a preference for candidates holding ITIL certification. Key deliverables for this engagement include the successful onboarding of users, the production of training manuals, and the resolution of support tickets. The opportunity is categorized under NAICS code 541519 and is associated with the state of Texas. Interested parties should note the response deadline of November 18, 2026.

Teacher Retirement System of Texas

POSTED

about 18 hours ago

DEADLINE

Premium Technical Support ProviderThis subcontract agreement establishes a partnership for premium technical support and hardware replacement services to assist prime contractors on network projects for Hattiesburg Clinic, P.A. The provider is responsible for maintaining 24x7 coverage, managing hardware replacement service level agreements, and providing dedicated engineering escalation paths. These operations are supported by the management of hardware replacement inventory and specialized logistics to ensure guaranteed response times. The contract requires a minimum commitment of three years to ensure ongoing stability and support. Administered under NAICS code 541519 and associated with MPTAP in Mississippi, the agreement focuses on delivering continuous technical reliability and rapid hardware restoration for critical network infrastructure.

POSTED

about 19 hours ago

DEADLINE

CMS Support and Maintenance ServicesThe CMS Support and Maintenance Services subcontract, managed by Enterprise Technology Solutions for the state of California, focuses on providing continuous technical support and maintenance for CMS and hosted environments. The selected provider will be responsible for troubleshooting system issues, applying necessary software patches, and offering help desk assistance to CMS authors utilizing administrative tools. A primary objective of the contract is to ensure system stability and uptime in strict adherence to established service level agreements. Under NAICS code 541519, the contractor is required to deliver regular maintenance reports to document system health and performance. Interested parties must submit their responses by November 21, 2026, following the posting date of October 20, 2026. This engagement is specifically designed to support prime contractors working on Air District web property projects.

Enterprise Technology Solutions

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Cisco DNA and Smart Net Service AgreementsThis subcontract opportunity, issued by the Das500000 Office Of Information Technology Gsvc, seeks a qualified provider to deliver software licensing and extended service agreements for prime contractors on DAS Computer Services projects. The scope of work specifically requires the provisioning of three-year Cisco DNA Advantage term licenses and Cisco Smart Net Total Care extended service agreements, ensuring that active software licenses and service contract registrations are properly delivered. To be eligible, candidates must maintain authorized Cisco partner status with the demonstrated capability to provision both DNA and Smart Net services. Interested parties should note that the response deadline is October 28, 2026, and the requirement falls under NAICS code 541519.

Das500000 Office Of Information Technlgy Gsvc

POSTED

about 20 hours ago

DEADLINE

AppEnhancer Software Support RenewalThis subcontract focuses on the annual software support and maintenance renewals for the AppEnhancer software suite, specifically serving prime contractors engaged in State of Alabama IT projects. The primary objective is to provide software maintenance licenses that guarantee uninterrupted access to technical support, patches, and original equipment manufacturer updates throughout the period of performance. To be eligible, providers must maintain E-Verify compliance and possess a valid Manufacturer's Reseller Authorization. The contract is categorized under NAICS code 541519 and is managed by the Alabama IT agency, with a response deadline set for October 23, 2026.

POSTED

about 20 hours ago

DEADLINE

AppEnhancer Support Renewal

Solicitation # SRC0000037235

Solicitation SRC0000037235 is a sole source purchase for the yearly AppEnhancer Support Renewal for the State of Alabama IT agency. The contract is governed by a Quick Quote Standard Boilerplate and is limited to a total cost of 25,000 dollars or a maximum duration of five years. The agreement allows for annual renewals by written consent of both parties, with approved price escalations capped at 5 percent of the annual contract cost, provided the total contract ceiling is not exceeded. The State of Alabama maintains the right to inspect all products after delivery in accordance with the Universal Commerce Code before final acceptance. Award evaluation is based on pricing, with the state reserving the right to analyze cost realism and price reasonableness. Additionally, the state may request proof of manufacturer reseller authorization, professional licenses, and insurance certificates. Suppliers must comply with several regulatory requirements, including E-Verify enrollment, registration with the Alabama Secretary of State for foreign entities, and certification of tax compliance and non-boycott activities. Payments must be accepted electronically via state-issued credit cards, P-cards, or EFT.

POSTED

about 20 hours ago

DEADLINE

Software Support ServicesThis subcontract for Software Support Services involves providing essential technical assistance, bug fixes, and system updates for prime contractors working on Herefordshire Council registration projects. The scope of work includes operating a technical help desk, applying software patches, and ensuring systems remain compliant with National Standards and evolving UK legislation through the use of version control systems and remote support tools. The primary objective is to ensure consistent system availability and the delivery of current software versions. Interested parties should note that the response deadline is November 13, 2026, with the project falling under NAICS code 541519.

Herefordshire Council

POSTED

about 21 hours ago

DEADLINE

Solicitation # 49641

The Massachusetts Port Authority, operating as Massport, has issued solicitation number 49641 for the Taegis MDR Renewal. This opportunity is open for responses until November 2, 2026, with the performance of services located within the state of Massachusetts. The award will be granted to the proposal deemed to be in the best interest of the Authority, rather than strictly to the lowest cost bidder. Proposers must provide detailed submissions that align with the Authority's evaluation criteria and are prohibited from altering any terms or conditions provided in the solicitation documents. Compliance with Massachusetts General Laws, specifically Chapter 268A regarding conflicts of interest, is mandatory. Proposers must disclose any potential conflicts and may be required to obtain opinions from the State Ethics Commission. Additionally, all information submitted in proposals is subject to the Massachusetts Public Records Law and is not considered proprietary or confidential. The successful contractor will be required to provide insurance coverage at their own expense as specified in the final agreement.

Massachusetts Port Authority - Goods & Services

POSTED

about 22 hours ago

DEADLINE

ACCELQ AI Automation Platform License ProviderThis subcontract agreement establishes a provider for proprietary ACCELQ software licenses to support prime contractors working on State of Ohio administration projects. The scope of delivery includes four units of the Unified Codeless-AI Automation Platform for Web and API, the Enterprise Upgrade package, and the ACCELQ Salesforce LIVE Add-On Bundle supporting up to five users. The provider is responsible for delivering active software licenses and ensuring continuous access to the hosted platform. To be eligible for this contract, the provider must maintain authorized ACCELQ reseller status and hold a valid Ohio MBE certification. The opportunity is categorized under NAICS code 541519 and is managed by the State of Ohio. Interested parties must adhere to the timeline established by the posting date of October 20, 2026, with a response deadline of November 3, 2026.

Puc300000 Administration Puc4

POSTED

about 23 hours ago

DEADLINE

Men & Mice Micetro IP Management RenewalThis subcontract, managed by the Department of Health and Human Services Omas Strategic Buying Center for Information Technology, focuses on the renewal of software licenses for the Men and Mice Micetro platform. The project supports prime contractors on NIAID IT projects by providing integrated management of IP Address Management and Dynamic Host Configuration Protocol services for approximately 23,000 IP addresses. The objective is to secure discounted open market pricing for these active license renewals to maintain critical network infrastructure. To be eligible, providers must hold authorized Men and Mice reseller status and ensure full compliance with FAR 52.240-90 and 52.240-91. The work is associated with NAICS code 541519 and will be performed in Bethesda. Interested parties should note the response deadline of October 26, 2026.

Omas Strategic Buying Center - Information Technology

POSTED

DEADLINE

Data Integration Security and Authorization SupportThe Data Integration Security and Authorization Support subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on performing security assessments and managing authorization readiness for prime contractors on OIT projects. The scope of work includes conducting security audits, managing Authority to Operate documentation, and implementing privacy controls through the use of vulnerability scanners and GRC tools. All activities must comply with FedRAMP, NIST, and VA cybersecurity policies to ensure the delivery of comprehensive security assessment reports, ATO packages, and compliance certifications. This opportunity falls under NAICS code 541519, with a response deadline set for November 4, 2026.

Technology Acquisition Center Nj (36C10B)

POSTED

DEADLINE

More opportunities from Vermont → Department of Economic Development

Same awarding agency

Resource Sharing System and Integrated Library System

Solicitation # 77232

POSTED

about 24 hours ago

DEADLINE

in about 2 months

Glover Guardrail Repairs

Solicitation # 77234

POSTED

DEADLINE

in about 1 month

45 CFR 155 Programmatic Compliance AuditThis subcontract, issued by the Vermont Department of Economic Development, requires a qualified provider to conduct annual independent external programmatic audits for prime contractors working on Vermont Health Access projects. The selected entity will analyze compliance with 45 CFR Part 155, specifically evaluating eligibility determination processes, APTC and CSR calculations, and QRS health plan measures. To successfully execute these tasks, the contractor must possess specialized expertise in GAGAS and the Program Integrity Rule Part II. The primary deliverables for this engagement include a comprehensive Programmatic Compliance Audit Report and detailed remediation proposals. Interested parties must submit their responses by November 6, 2026, under NAICS code 541611.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Independent Financial Audit (GAAP/GAGAS)This subcontract opportunity, issued by the Vermont Department of Economic Development, seeks a qualified CPA firm to perform annual independent external financial audits for prime contractors on Vermont Health Access projects. The selected firm will be responsible for examining financial reporting for accuracy and auditing all receipts and expenditures in strict accordance with GAAP and GAGAS standards. Additionally, the contractor must assess process design to ensure overall effectiveness, integrity, and accountability. To be eligible, the firm must be compliant with 45 CFR 155.1200(c) and is required to deliver a comprehensive Financial Statement Audit Report by June 1 each year. Interested parties should note that the response deadline for this engagement is November 6, 2026.

Offices of Certified Public Accountants

POSTED

DEADLINE

Programmatic and Financial Audits 45 CFR 155

Solicitation # 03410-255-27

The Department of Vermont Health Access is seeking an independent CPA firm to conduct programmatic and financial audits of Vermont Health Connect, the state's State Based Exchange, for State Fiscal Years 2026 through 2030. The selected contractor will perform annual external audits to ensure compliance with 45 CFR 155, specifically focusing on financial reporting accuracy per GAAP, the effectiveness of control frameworks, and the integrity of eligibility determinations and enrollment transactions. Key deliverables include a Financial Statement Audit Report and a Programmatic Compliance Audit Report, which must be made available to the U.S. Department of Health and Human Services by June 1 annually. The audits must adhere to Generally Accepted Governmental Auditing Standards (GAGAS) and GAAP. The period of performance is scheduled from November 1, 2026, to October 31, 2029. Awards will be made based on the best interest of the State, with preferences given to resident bidders and those promoting clean energy practices. The contract includes strict compliance requirements, such as the Byrd Anti-Lobbying Certification for contracts over 100,000 dollars, prohibitions on specific telecommunications equipment under Public Law 115-232, and adherence to OSHA guidelines for workplace violence prevention. Payment terms are Net 30 days following the submission of detailed monthly invoices. Bidders must submit their proposals as digitally searchable PDFs by November 6, 2026, including a technical response, price schedule, and a signed Certificate of Compliance.

POSTED

DEADLINE

Grant Application Support and Technical WritingThis subcontract, titled Grant Application Support and Technical Writing, provides technical writing and administrative assistance to prime contractors working on transportation projects for the Addison County Regional Planning Commission. The scope of work includes developing grant applications for rural infrastructure funding, utilizing estimation software to create project cost estimates, and drafting technical memoranda. Key deliverables for the contract consist of completed grant applications, detailed cost estimate documents, and final technical reports. Managed under the Vermont Department of Economic Development, the opportunity is categorized under NAICS code 541611. The solicitation was posted on October 19, 2026, with a response deadline set for November 16, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Public Outreach and Stakeholder Engagement ServicesThis subcontract for Public Outreach and Stakeholder Engagement Services supports prime contractors working on transportation initiatives for the Addison County Regional Planning Commission. The selected provider will be responsible for managing communication and engagement efforts by coordinating with regional partners, elected officials, and municipal staff. Key duties include the development of community involvement strategies and the organization of public meetings, with required deliverables consisting of stakeholder engagement reports and summaries of public meetings. The opportunity is issued by the Vermont Department of Economic Development under NAICS code 541620. Interested parties must submit their responses by the deadline of November 16, 2026, at 10:00 AM. Further details regarding the solicitation can be accessed through the Vermont Business Registry.

Environmental Consulting Services

POSTED

DEADLINE

Transportation Safety Studies & Countermeasure DevelopmentThis subcontract, titled Transportation Safety Studies and Countermeasure Development, is issued by the Vermont Department of Economic Development. The selected provider will be responsible for performing safety-specific audits and identifying high-risk locations for prime contractors working on Addison County Regional Planning Commission projects. The scope of work involves collecting and analyzing crash data and safety metrics to develop targeted countermeasures aimed at reducing accidents and overall risks. The contractor must apply rural road safety standards to deliver comprehensive transportation safety studies and a finalized list of proposed countermeasures. Interested parties should note that the response deadline is November 16, 2026, and the project falls under NAICS code 541330.

Engineering Services

POSTED

DEADLINE

Rural Transportation Planning and Engineering ServicesThis subcontract for Rural Transportation Planning and Engineering Services involves providing technical transportation analysis and conceptual design support for prime contractors working on Addison County Regional Planning Commission rural transportation projects. The scope of work includes conducting parking design assessments, evaluating intersections for traffic operations and sight-distance, and developing corridor and gateway treatments focused on traffic calming. The selected provider will utilize traffic analysis software to produce technical memoranda, intersection evaluation reports, and conceptual designs. This opportunity is associated with the Vermont Department of Economic Development under NAICS code 541330, with a response deadline set for November 16, 2026.

Engineering Services

POSTED

DEADLINE

FY27 Transportation Planning Services

Solicitation # 77229

The Addison County Regional Planning Commission (ACRPC) is soliciting qualifications from experienced transportation planning and engineering firms to provide project-specific services for the towns of Bristol and Monkton, Vermont. This engagement is intended to support planning, design, and assessment activities for federal fiscal year 2027, with an anticipated budget of up to 50,000 dollars. The scope of work focuses on rural transportation planning, multimodal safety, and conceptual design, including deliverables such as parking design and layout assessments, intersection evaluations for traffic operations and sight-distance, transportation safety studies, and the development of gateway and corridor treatments for traffic calming. Interested firms must submit their qualifications electronically by November 16, 2026. Submissions will be evaluated based on demonstrated experience with rural transportation planning, the expertise of proposed staff, the quality of past work, understanding of municipal needs, the ability to provide cost-effective services, and the strength of client references. Required submission materials include a letter of interest, a summary of relevant experience in small communities, resumes of key personnel, work examples, at least three references, and a description of the firm's approach to project management and community involvement. The primary point of contact for this solicitation is Mike Winslow, Assistant Director of the ACRPC.

Engineering Services

POSTED

DEADLINE

Process Controls & InstrumentationThis subcontract for Process Controls and Instrumentation involves the installation and configuration of control systems for prime contractors working on Tri-Town Water District No. 1 facility projects. The scope of work includes the installation of sensors, actuators, and control panels, as well as the wiring and integration of PLC and SCADA systems. The selected contractor will be responsible for programming and testing control logic to deliver a fully functional automated control system specifically for the filtration process. Managed by the Vermont Department of Economic Development under NAICS code 238210, the project mandates strict adherence to BABAA, AIS, and Davis-Bacon Act compliance. The solicitation was posted on October 19, 2026, with a response deadline of November 17, 2026.

Electrical Contractors and Other Wiring Installation Contractors

POSTED

DEADLINE

Chemical Feed System InstallationThis subcontract for the Vermont Department of Economic Development involves the supply and installation of chemical feed systems for facility projects at Tri-Town Water District No. 1. The scope of work includes the installation of dosing pumps, chemical storage tanks, and delivery lines constructed from corrosion-resistant materials, as well as the calibration of feed rates for water treatment chemicals to ensure a fully operational system integrated with existing filters. The project is categorized under NAICS code 238220 and requires strict adherence to the Davis-Bacon Act, Build America Buy America Act, and American Iron and Steel requirements. Interested parties must submit their responses by November 17, 2026, to provide these specialized installation services for the prime contractors.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS