Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 2 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Privacy Integration & Risk Management Support

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This contract involves providing support to integrate privacy considerations into security practices and conducting Privacy Impact Assessments (PIAs) for IT systems managed by the National Institutes of Health (NIH), specifically under the National Institute of Child Health and Human Development (NICHD). The work focuses on ensuring compliance with federal privacy requirements while assisting in risk management efforts across these systems. The contract is a subcontract categorized under NAICS code 541612, indicating consulting services related to privacy and risk management. The performance location for this contract is Bethesda, aligning with NIH's primary operational base. The effort aims to bolster the agency's ability to protect sensitive information by embedding privacy into everyday security workflows, thus supporting the overall mission of safeguarding federal health data. While there is no specified set-aside or additional organizational details, this work is critical to adhering to legal standards and enhancing system security within the Department of Health and Human Services.

General Info

Provide privacy integration support and conduct PIAs for NIH IT systems ensuring federal compliance.

Agency

Department Of Health And Human Services → National Institutes Of Health NichdView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

Bethesda, MD, USA

Set-Aside

NONE

Documents

This scope was carved out of 7597021F00077.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

SSJ: NIH OD OCIO: Information Security Management Support Services

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJun 2

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Health And Human Services → National Institutes Of Health Nichd

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Health And Human Services → National Institutes Of Health Nichd

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Integrate privacy into security practices, conduct PIAs, and support risk management across NIH IT systems in compliance with federal privacy requirements.

Similar Contracts

Same NAICS industry code

Cybersecurity Assessment and CMMC Compliance SupportThe Defense Logistics Agency within the Department of Defense is seeking a subcontractor for Cybersecurity Assessment and CMMC Compliance Support. This engagement focuses on achieving CMMC Level 2 compliance through the execution of system audits, the development of necessary documentation, and ensuring strict alignment with NIST SP 800-171 standards. The selected provider will be responsible for coordinating with a Certified Third-Party Assessment Organization to secure final certification. This subcontract falls under NAICS code 541612 and was posted on August 17, 2026.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Assessment & Compliance ReportingThis subcontract with the Defense Logistics Agency focuses on Cybersecurity Assessment and Compliance Reporting to ensure adherence to Department of Defense standards. The primary objective is to conduct NIST SP 800-171 assessments and maintain continuous cybersecurity compliance, which includes the mandatory reporting of cyber incidents within a 72-hour window and the submission of compliance scores to the Supplier Performance Risk System. The engagement involves recurring evaluations to verify ongoing security posture and regulatory alignment. Classified under NAICS code 541612, the contract emphasizes the rigorous monitoring and reporting requirements necessary to protect sensitive defense information.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2)This subcontract with the Defense Logistics Agency focuses on achieving Cybersecurity Maturity Model Certification Level 2 compliance. The primary objective is to perform a comprehensive self-assessment and coordinate a third-party assessment through a C3PAO to ensure all requirements for safeguarding controlled unclassified information are met. The scope of work specifically targets adherence to DFARS 252.204-7012 and NIST SP 800-171 standards. Classified under NAICS code 541612, the project is designed to validate the security posture of the organization within the Department of Defense framework.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance and NIST SP 800-171 Assessment SupportThis subcontract with the Defense Logistics Agency under the Department of Defense focuses on providing comprehensive cybersecurity compliance and assessment support. The primary objective is to ensure adherence to NIST SP 800-171 and DFARS cybersecurity clauses through detailed assessments, the creation of necessary documentation, and the implementation of incident reporting protocols. Classified under NAICS code 541612, the agreement was posted on August 17, 2026. It serves as a critical mechanism for maintaining security standards within the agency's operational framework, specifically targeting the protection of sensitive information and the mitigation of cybersecurity risks.

Defense Logistics Agency

POSTED

DEADLINE

NIST SP 800-171 Cybersecurity Compliance Assessment & ReportingThis subcontract with the Defense Logistics Agency under the Department of Defense focuses on ensuring cybersecurity compliance with NIST SP 800-171 standards. The primary objectives include conducting detailed compliance assessments, developing System Security Plans and Plans of Action and Milestones, and submitting the final results to the Supplier Performance Risk System. The scope of work emphasizes the protection of Controlled Unclassified Information and strict adherence to DFARS requirements. Classified under NAICS code 541612, the contract ensures that the necessary security frameworks are implemented and reported to maintain the integrity of defense-related data systems.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance and SPRS Assessment SupportThe Defense Logistics Agency is seeking a subcontractor to provide cybersecurity compliance and SPRS assessment support. The primary objective of this engagement is to ensure adherence to NIST SP 800-171 standards through the execution of system assessments and the development of necessary documentation. The selected provider will be responsible for managing the SPRS submission process for both prime and subcontractors. This effort falls under NAICS code 541612 and is designed to strengthen the cybersecurity posture of the Department of Defense supply chain.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance & NIST SP 800-171 Assessment SupportThis subcontract with the Defense Logistics Agency under the Department of Defense focuses on providing comprehensive cybersecurity compliance and NIST SP 800-171 assessment support. The primary objective is to maintain DFARS compliance through the delivery of ongoing assessments, regular updates to the System Security Plan, and the management of SPRS reporting. Classified under NAICS code 541612, the agreement ensures that the necessary security frameworks are implemented and documented to meet federal standards. The contract was posted on August 17, 2026, and is designed to provide the technical expertise required to navigate complex defense cybersecurity requirements.

Defense Logistics Agency

POSTED

DEADLINE

Cybersecurity Compliance and CUI ManagementThis subcontract, titled Cybersecurity Compliance and CUI Management, is issued by the Defense Logistics Agency under the Department of Defense. The primary objective of the agreement is to provide comprehensive support for NIST SP 800-171 compliance, the protection of Controlled Unclassified Information, and the management of cyber incident reporting as required by FAR 52.204-7012. The contract falls under NAICS code 541612 and was posted on August 17, 2026. It focuses on ensuring that cybersecurity standards are met to safeguard sensitive government information and maintain regulatory compliance within the defense supply chain.

Defense Logistics Agency

POSTED

DEADLINE

Egypt Annual Program Statement

Solicitation # DFOP0018819

The Bureau of Near Eastern Affairs’ Office of Assistance Coordination is soliciting proposals under the Egypt Annual Program Statement to advance U.S. commercial diplomacy and economic interests in Egypt through targeted projects that prioritize American enterprise and private capital over traditional aid. Proposals must demonstrate how programs will leverage U.S. assistance as a strategic tool to promote trade, enhance market access, and catalyze investment in key sectors including energy development and exports, trade facilitation, emerging technologies like AI and telecommunications, critical infrastructure such as aviation and transport, critical minerals, regional economic integration, advanced manufacturing, workforce training aligned with U.S. business needs, and economic recovery in conflict-affected areas. Projects are expected to orient implementing partners toward the American business community, foster burden-sharing, and create measurable pathways for U.S. firms to secure foreign contracts and tenders. The program does not fund purely humanitarian, academic, or non-commercial activities. Proposals must align with country-specific strategic priorities and be submitted through the Department of State’s MyGrants portal by August 31, 2026, with project performance expected to commence on October 1, 2026, and last between 12 and 36 months. All applicants must hold an active Unique Entity Identifier (UEI) and be registered in SAM.gov, with foreign entities exempt from CAGE codes unless involved in DoD-related work. Proposals are evaluated on a 100-point scale with primary emphasis on the quality and feasibility of the program idea (30 points), followed by organizational capacity (20 points), ability to achieve objectives (15 points), monitoring and evaluation plan (15 points), budget (10 points), and sustainability (10 points). Cost is not a primary selection criterion, though lower indirect cost rates serve as a tiebreaker. Applicants must submit a 10-page narrative in Word format with mandatory forms, a logic model up to two pages, a security plan up to three pages, and a one-page CV for each key personnel member. Additional annexes up to four pages total are permitted. Special requirements include a comprehensive security plan addressing operational, digital, and insurance risks, mandatory compliance with 2 CFR Part 200, affirmation of adherence to federal anti-discrimination and trafficking in persons laws for projects over $500,000, and compliance with Leahy Law vetting if involving foreign security forces. Funding is not guaranteed beyond the initial award period, and the Department of State retains full discretion to decline awards

Bureau Of Near Eastern Affairs

POSTED

DEADLINE

Cybersecurity Compliance and ReportingThe Cybersecurity Compliance and Reporting subcontract, issued by the Department of Defense under the ASC Commodities Division, focuses on the implementation and maintenance of cybersecurity protocols. The primary objective is to protect covered defense information and ensure the timely reporting of cyber incidents in accordance with DFARS regulations. This opportunity is categorized under NAICS code 541612 and is to be performed in New Cumberland, Pennsylvania. The solicitation was posted on August 16, 2026, with a response deadline of August 24, 2026.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity & CMMC Compliance SupportThis subcontract opportunity, titled Cybersecurity and CMMC Compliance Support, is issued by the Department of Defense under the ASC Supplier Oper AE and AF Div. The primary objective is to provide support for CMMC Level 2 compliance and NIST SP 800-171 assessments to ensure the proper handling of covered defense information in accordance with DFARS requirements. The work is designated for performance at Hill AFB in ZIP code 84056-5734. The procurement is categorized under NAICS code 541612 and is designated as a Total Small Business Set-Aside. Interested parties must submit their responses by August 24, 2026, following the posting date of August 16, 2026.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)The Cybersecurity Compliance for Covered Defense Information subcontract, issued by the Department of Defense ASC Commodities Division, requires the implementation and maintenance of NIST SP 800-171 security controls. The primary objective is to achieve CMMC Level 2 certification to ensure the protection of Covered Defense Information throughout the duration of the contract performance. This opportunity is categorized under NAICS code 541612 and is based in Tracy, California. Interested parties must submit their responses by the deadline of August 24, 2026, following the posting date of August 16, 2026.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

More opportunities from Department Of Health And Human Services → National Institutes Of Health Nichd

Same awarding agency

Mirava STED and Confocal Microscope

Solicitation # 75N98026Q01025

Solicitation 75N98026Q01025 is a request for quotations for the purchase of an Abberior Instruments America Mirava STED and Confocal Microscope or an equivalent system for the National Institutes of Health in Bethesda, Maryland. The acquisition aims to replace an obsolete Nikon A1R system to support high-resolution imaging and research across multiple groups within the National Institute of Mental Health. The selected vendor must provide delivery, installation, a minimum of two days of on-site training, and a comprehensive three-year manufacturer warranty. The government will award a firm-fixed-price purchase order based on a best-value evaluation considering technical acceptability, past performance, and price. Technical acceptability is the primary factor, and vendors offering an equal product must provide detailed documentation to prove equivalency. Quotations must be submitted by August 25, 2026, and include a technical quote, past performance record, and a price quote. Additionally, all offerors must maintain active SAM registration, and large businesses are required to submit a Small Business Subcontracting Plan.

Analytical Laboratory Instrument Manufacturing

POSTED

DEADLINE

Notice of Intent to Sole Source - Sister Study PFAS and Exposomics Analysis

Solicitation # 75N94026Q00057

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Chemistry Research for the Division of Translational Toxicology (DTT)

Solicitation # 75N94026R00002

The National Institute of Environmental Health Sciences (NIEHS), through its Division of Translational Toxicology (DTT), is seeking chemistry research support to advance the National Toxicology Program’s mission of understanding how environmental factors impact human health. This acquisition, identified by solicitation number 75N94026R00002, is a market research effort aimed at identifying qualified vendors capable of providing comprehensive chemistry services across eight functional areas: Logistics and Handling, Characterization, Formulation, Biosample Analysis, Special Studies, Animal Studies, Omics, and In Vitro Assays. The contractor will be responsible for end-to-end chemistry support, including handling hazardous materials, developing and validating analytical methods, conducting toxicokinetic and ADME studies, and ensuring compliance with FDA Good Laboratory Practices, DOT regulations for chemical transport, and NCI guidelines. Work is to be performed at the contractor’s facilities, coordinated closely with DTT in Bethesda, Maryland, where all data and reports must be submitted electronically through the DTT Program Management System in accordance with Section 508 accessibility standards. The anticipated contract structure includes a ten-year base period with an optional six-month extension, and the government expects to use a Cost Plus Fixed-Fee contract type. Evaluation of future proposals will prioritize technical performance, with Logistics and Handling carrying the highest weight at 30%, followed by key areas such as Biosample Method Development and Chemical Identity and Purity at a weight of five. Proposals must include detailed Quality Management Plans, Health and Safety Plans, and IT Security Plans, all of which must be approved prior to work commencement. Key personnel, including the Principal Investigator and Quality Assurance Officer, must be direct employees of the prime contractor, and subcontractors may not fulfill these roles. Facilities involved in animal work must hold AAALAC accreditation and maintain an active IACUC, while the prime contractor must hold DEA licensing for controlled substances. The solicitation requires respondents to submit a single 15-page Capability Statement via email by March 4, 2026, with the document limited to Word or PDF formats. While this posting is for market research and not a formal solicitation, it sets the stage for a future contract with no set-aside classification under NAICS code 541715, and the government will consider all business sizes in the selection process. Financial and administrative details, including payment methods and accounting codes, will be finalized in the subsequent Request for Proposal.

Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

DEADLINE

Surge Capacity and Temporary IT SupportThe contract titled "Surge Capacity and Temporary IT Support" is a subcontract issued by the National Institutes of Health NICHD, part of the Department of Health and Human Services. Its primary purpose is to provide on-demand IT staffing solutions designed to manage peak workloads, handle emergencies, and fill short-term gaps in IT operations. This flexible support ensures that critical IT functions remain uninterrupted during periods of increased demand or unexpected staff shortages. The contract falls under the NAICS code 561320, which pertains to temporary help services. Work associated with this contract will be performed in Bethesda. Although specific details such as solicitation number, point of contact, and exact office address are not provided, the contract is aimed at augmenting the agency’s IT capabilities through timely and scalable staffing resources. This approach enables the NIH NICHD to maintain operational efficiency and responsiveness in its IT environment.

Temporary Help Services

POSTED

DEADLINE

Telecommunications and Network SupportThis contract involves providing comprehensive telecommunications infrastructure support along with coordination of voice and data networks, ensuring seamless integration with the National Institutes of Health (NIH) wide communications systems. The work is focused on maintaining and enhancing telecom capabilities, supporting the operational needs of NIH’s communication framework. The subcontract is designated under NAICS code 517110, which pertains to wired and wireless telecommunications carriers. The contract is issued by the National Institutes of Health, specifically the NICHD office within the Department of Health and Human Services. The primary place of performance is Bethesda, supporting NIH's ongoing efforts to maintain robust and reliable network infrastructure. The scope includes technical support for voice and data systems, network coordination, and integration tasks that align with NIH's overarching communication system goals. Though solicitation details and set-aside information are not provided, the contract facilitates critical backend infrastructure enhancement to support NIH’s research and administrative operations.

Wired Telecommunications Carriers

POSTED

DEADLINE

Data Center Operations and Hosting CoordinationThis contract involves providing comprehensive support for data center infrastructure operations, including server monitoring, hosting services, storage coordination, and timely response to outages. It is a subcontract under the NAICS code 518210, which pertains to data processing, hosting, and related services. The contract is issued by the National Institutes of Health NICHD, part of the Department of Health and Human Services, with the place of performance located in Bethesda. The primary focus is to ensure the reliable and efficient operation of the data center's technical environment by maintaining continuous server oversight and facilitating hosting and storage management. Additionally, the contractor is responsible for addressing any service disruptions promptly to minimize downtime. This arrangement is crucial for maintaining the operational integrity and availability of the agency’s IT infrastructure supporting its research and administrative activities.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Executive and Administrative SupportThis contract is established to provide high-level administrative support services to the Office of the Chief Information Officer (OCIO) leadership at the National Institutes of Health, specifically within the NICHD division under the Department of Health and Human Services. The scope of work includes key administrative functions such as scheduling, managing correspondence, coordinating meetings, and handling executive communications to ensure smooth and efficient operations for the leadership team. The contract is designated as a subcontract under the NAICS code 561410, which covers office administrative services. The work will be performed primarily in Bethesda, although specific state and zip code details are not provided. This contract aims to facilitate the administrative needs of OCIO leadership by streamlining their communication and organizational tasks, ultimately supporting effective management and decision-making. The status and additional details of the contract can be accessed through the provided SAM.gov link, with the process initiated on June 11, 2026.

Document Preparation Services

POSTED

DEADLINE

Property and Network Security AdministrationThis contract involves the management of both physical and logical access controls, ensuring secure and authorized entry to facilities and network resources. It includes comprehensive asset tracking to monitor and safeguard organizational property effectively. Additionally, the contract emphasizes maintaining cybersecurity compliance, aligning with established standards to protect sensitive information and systems. Coordination with Identity, Credential, and Access Management (ICAM) is also a key component, ensuring integrated and streamlined security protocols. The contract is titled "Property and Network Security Administration" and is a subcontract issued by the National Institutes of Health NICHD under the Department of Health and Human Services. The work will be performed in Bethesda, aligning with NAICS code 541990, which typically covers specialized professional services. Though solicitation details and specific points of contact are not provided, the contract underscores a focus on securing both physical properties and network infrastructure to support the agency’s mission-critical operations.

All Other Professional, Scientific, and Technical Services

POSTED

DEADLINE

Application Development and ModernizationThis contract involves providing support for the development, maintenance, and modernization of enterprise applications used by the National Institutes of Health (NIH) Center for Information Technology (CIT) and the Office of the Chief Information Officer (OCIO). Key activities include cloud migration, application integration, and modernization efforts aimed at improving the technological infrastructure supporting NIH operations. The work is focused on ensuring these critical applications remain efficient, secure, and up-to-date with current technology standards. The contract is a subcontract under the NAICS code 541512, related to computer systems design services. The place of performance is Bethesda, Maryland, where NIH headquarters are located. The contract is managed under the Department of Health and Human Services through the NIH's National Institute of Child Health and Human Development (NICHD). This initiative supports NIH’s ongoing commitment to leveraging advanced IT solutions to enhance research and administrative capabilities.

Computer Systems Design Services

POSTED

DEADLINE

Financial Analysis and Administrative ReportingThe contract involves providing financial analysis, budget tracking, cost reporting, and administrative support specifically for IT programs at the National Institutes of Health (NIH), particularly within the National Institute of Child Health and Human Development (NICHD). The work is structured as a subcontract under the NAICS code 541618, which relates to management consulting services. The services are to be performed in Bethesda, supporting the Department of Health and Human Services' efforts to manage and oversee IT program finances efficiently. This contract aims to ensure accurate financial management and administrative oversight to support NIH's IT initiatives. While some specific details such as set-aside status, solicitation number, and organization type are not provided, the contract’s primary focus is on facilitating effective budget oversight and financial accountability within NIH’s IT projects. This includes timely and detailed reporting and analysis to assist in proper program management and decision-making.

Other Management Consulting Services

POSTED

DEADLINE

Technical Writing and Documentation ServicesThis contract involves providing technical writing and documentation services specifically for the National Institutes of Health (NIH) IT systems. The scope includes developing and maintaining various technical documents such as user guides, standard operating procedures (SOPs), policy documents, and other related materials to support NIH IT operations. The work is categorized under NAICS code 541930, which pertains to translation and interpretation services, indicating a focus on clear and precise communication of technical information. The contract is a subcontract and is posted by the NIH’s National Institute of Child Health and Human Development under the Department of Health and Human Services. The primary place of performance is Bethesda, where the NIH is headquartered. This contract is intended to ensure that critical IT documentation is comprehensive, accurate, and kept up to date to facilitate the effective use and management of NIH IT systems. No specifics about type of set aside or point of contact were provided in the data.

Translation and Interpretation Services

POSTED

DEADLINE

IT Project Management SupportThe contract involves providing project management support for the National Institutes of Health (NIH), specifically focused on IT centralization initiatives. The scope includes key responsibilities such as planning, coordination, risk mitigation, and regular reporting to stakeholders, aimed at ensuring the successful consolidation and management of IT resources. This work is positioned as a subcontract under the North American Industry Classification System (NAICS) code 541611, which pertains to administrative management and general management consulting services. The place of performance is Bethesda, reflecting the NIH's primary location. The contract was publicly posted on June 11, 2026, through the Department of Health and Human Services, under the NIH's Eunice Kennedy Shriver National Institute of Child Health and Human Development (NICHD) office. While specific details such as solicitation number, type of set-aside, or point of contact are not provided, the contract focuses on comprehensive project management to support the agency’s IT modernization efforts and enhance operational efficiencies.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE