Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

RMF Authorization and CMMC Compliance Services

Active

Federal

Response Deadline10/29/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The RMF Authorization and CMMC Compliance Services subcontract supports prime contractors on Defense Health Agency projects under the Department of Defense. The primary objective is to provide security engineering and documentation necessary to obtain an Authorization to Operate (ATO) or system accreditation decision. Key technical responsibilities include developing RMF packages, implementing Role-Based Access Control, and conducting security assessments using specialized RMF toolsets. The contract requires strict adherence to multiple regulatory frameworks, including HIPAA, CMMC, and DFARS standards 252.204-7012 and 252.204-7021. Classified under NAICS code 541519, the engagement focuses on ensuring comprehensive security compliance and risk management for enterprise medical support systems.

General Info

Agency

Department Of Defense → Dha Enterprise Medical Support Ems-Cd

NAICS

541519 - Other Computer Related Services

Place of Performance

0, TX, 78234, USA

Set-Aside

NONE

Documents

This scope was carved out of HT001527RFI1015.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFI: Defense Health Agency (DHA) Cognitive Monitoring Tool

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 15

subcontract

Response DeadlineOct 29

Submission deadline

Response Deadline

10/29/2026, 10:00:00 PM UTCin 13 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Dha Enterprise Medical Support Ems-Cd

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Dha Enterprise Medical Support Ems-Cd

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security engineering and documentation for prime contractors on Defense Health Agency projects to obtain Authorization to Operate (ATO). Develops RMF packages, implements Role-Based Access Control (RBAC), and ensures compliance with DFARS 252.204-7012, 252.204-7021, CMMC, and HIPAA standards. Conducts security assessments using RMF toolsets. Delivers the final ATO or system accreditation decision.

Similar Contracts

Same NAICS industry code

Tier 1-3 Technical Support Services

City of Powder Springs

POSTED

about 9 hours ago

DEADLINE

24x7 Security Monitoring and Incident Response

City of Powder Springs

POSTED

about 9 hours ago

DEADLINE

Rocket Reflection Enterprise Suite Maintenance ProviderThis subcontract, managed by the Office of Technology and Solutions for the state of California, provides annual maintenance and support licenses for the Rocket Reflection Enterprise Suite. The agreement specifically covers 24 units of part number AMC-RESS-MS-100 to support prime contractors working on California Health and Human Services Agency projects. All services must be delivered in accordance with the IT General Provisions for Cloud Computing Services to ensure active coverage throughout the contract term. To maintain compliance, the provider is required to conduct staff background checks and ensure all personnel complete annual information privacy training. The contract falls under NAICS code 541519 and is focused on the continuous delivery of technical maintenance and support for the specified enterprise software suite.

Ofc Technology and Solutions I

POSTED

about 18 hours ago

DEADLINE

Fraud Prevention and Disbursement Security ServicesThe Fraud Prevention and Disbursement Security Services subcontract for the Troup County School System in Georgia focuses on the implementation and management of automated fraud detection tools for banking projects. The scope of work includes the deployment of Positive Pay for checks, Payee Verification, and ACH debit blocks, alongside the configuration of dual approval workflows and real-time security alerts. These systems are designed to generate daily Credit Account Reconciliation Reports to ensure strict compliance with banking security standards. This integrated fraud monitoring and prevention system is categorized under NAICS code 541519. The solicitation was posted on October 15, 2026, with a response deadline set for November 6, 2026. The project aims to provide prime contractors with a robust security framework to safeguard financial disbursements and maintain the integrity of the school system's banking operations.

Troup County School System

POSTED

about 19 hours ago

DEADLINE

Digital Platform Technical Support & MaintenanceThis subcontract for Digital Platform Technical Support and Maintenance involves providing ongoing technical assistance, bug fixes, and system updates for digital procurement platforms used by prime contractors on State of Illinois CPO-GS projects. The scope of work includes comprehensive Tier 1, 2, and 3 help desk support managed through ticketing systems such as Jira or ServiceNow, alongside regular security patching, software updates, and continuous system performance monitoring to ensure platform availability. The opportunity is issued by the Illinois Chief Procurement Office of General Services under NAICS code 541519. Interested parties should note the posted date of October 15, 2026, with a response deadline set for November 4, 2026. The primary objective of the contract is the delivery of maintained platform stability and the efficient resolution of technical support tickets.

CPOGS51001 - Chief Procurement Office Of General Services

POSTED

about 19 hours ago

DEADLINE

Independent Accessibility Testing & RemediationThis subcontract for Independent Accessibility Testing and Remediation supports prime contractors working on projects for the Brushy Creek Municipal Utility District in Texas. The selected provider will perform third-party accessibility validation to ensure that websites meet WCAG 2.1 Level AA compliance standards. This process involves rigorous testing using specialized tools such as JAWS, NVDA, and WAVE to identify defects. The scope of work includes providing detailed remediation guidance or directly correcting identified defects to achieve full accessibility. Final deliverables consist of comprehensive accessibility audit reports and a certified compliant website. The solicitation was posted on October 15, 2026, with a response deadline of November 13, 2026, falling under NAICS code 541519.

BRUSHY CREEK MUNICIPAL UTILITY DISTRICT

POSTED

about 21 hours ago

DEADLINE

IT Security Assessment and Penetration Testing ServicesThis subcontract opportunity for IT Security Assessment and Penetration Testing Services involves performing non-destructive vulnerability assessments for prime contractors working on Philadelphia Gas Works IT infrastructure projects. The scope of work includes a wide range of security evaluations, such as external gateway testing, internal network exploitation, web application testing, and wireless access control assessments. Additionally, the contractor will be responsible for simulating data exfiltration and attempting privilege escalation to Root or Domain Admin levels. The selected provider must deliver comprehensive technical findings reports along with executive summaries to document their results. This project falls under NAICS code 541519 and is associated with the state of Pennsylvania. Interested parties should note that the response deadline for this solicitation is November 3, 2026.

Philadelphia Gas Works

POSTED

about 22 hours ago

DEADLINE

INFORMATION SECURITY ASSESSMENT AND TESTING SERVICES

Solicitation # 36016

Philadelphia Gas Works (PGW) is soliciting proposals under RFP 36016 for non-destructive vulnerability assessment and penetration testing services. The scope of work includes IT assessments of external gateways, internal network systems, and mobile wireless access controls, as well as OT architecture reviews and vulnerability assessments. IT assessments are to be performed annually, while OT assessments are conducted biennially. The selected vendor must provide detailed written reports on findings and tools used, along with executive summaries for management. The contract is for an initial one-year term with the option for up to four one-year renewals. Proposals must be submitted via pgw.procureware.com by 2:00 p.m. on November 3, 2026, with a clarification deadline of October 22, 2026. PGW will award the contract based on the most advantageous proposal, evaluating factors such as technical capacity, prior experience, solution quality, and long-term cost effectiveness. Proposers must provide a fixed price for IT and OT services separately and submit comprehensive documentation, including a W-9, banking information for ACH payments, and a required 17-1400 disclosure. Compliance with the Americans with Disabilities Act and strict confidentiality regarding all engagement data are mandatory requirements.

Philadelphia Gas Works

POSTED

about 22 hours ago

DEADLINE

RMF/ATO Compliance SpecialistThis subcontract opportunity for an RMF/ATO Compliance Specialist supports the NASA IT Procurement Office in achieving Agency Authority to Operate (ATO) for prime contractors. The selected provider will be responsible for preparing security packages in accordance with NPR 7120.7, conducting vulnerability assessments, and developing essential technical documentation, including data dictionaries and entity relationship diagrams. Success in this role requires deep expertise in NIST SP 800-53, NPR 7120.7, and FedRAMP High standards. The project is based at the Stennis Space Center under NAICS code 541519. Interested parties must note the response deadline of October 22, 2026. The primary objective of the engagement is the successful delivery and attainment of the Agency Authority to Operate approval.

NASA It Procurement Office

POSTED

DEADLINE

EP Evaluator Release 12 Subscription and Technical Support Provider

256-NETWORK Contract Office 16 (36C256)

POSTED

DEADLINE

Cloud Security and FedRAMP Compliance ConsultantThis subcontract opportunity for a Cloud Security and FedRAMP Compliance Consultant supports prime contractors working on Defense Commissary Agency projects within the Department of Defense. The primary objective is to ensure the security of SaaS environments through the implementation of security controls, the performance of rigorous security audits, and the comprehensive management of Authorization to Operate processes. The work will be performed in Fort Lee, Virginia, under NAICS code 541519. Qualified providers must possess deep technical expertise in FISMA, NIST SP 800-53, and FedRAMP standards to deliver a hardened cloud environment. Key deliverables include the procurement of security certifications and the submission of detailed compliance reports. Interested parties must submit their responses by October 29, 2026.

Defense Commissary Agency

POSTED

DEADLINE

Remote Technical Support and Virtual DiagnosticsThis subcontract, titled Remote Technical Support and Virtual Diagnostics, provides specialized remote troubleshooting and system qualification services for prime contractors working on Department of Veterans Affairs projects under Network Contract Office 19. The scope of work involves executing factory-supported remote diagnostics, deploying firmware tools, and managing Agilent-specific compliance and qualification platforms. These tasks are performed using proprietary virtual assistance technologies and require authorized access to Agilent proprietary remote support infrastructure. The primary deliverables for this engagement include the provision of remote diagnostic reports and official system qualification certifications. Classified under NAICS code 541519, the opportunity was posted on October 15, 2026, with a response deadline of October 22, 2026.

Network Contract Office 19 (36C259)

POSTED

DEADLINE

More opportunities from Department Of Defense → Dha Enterprise Medical Support Ems-Cd

Same awarding agency

Cognitive Assessment Tool Development & ValidationThis subcontract, titled Cognitive Assessment Tool Development and Validation, supports prime contractors on Defense Health Agency projects under the Department of Defense. The primary scope of work involves providing validated cognitive assessment catalogs and designing unsupervised self-administration workflows specifically for mTBI screening. Additionally, the contractor is responsible for developing a Common Data Model for assessment data and creating HIPAA-compliant clinical reporting tools for commanders and senior leaders using psychometric testing software. The project is categorized under NAICS code 541720 and requires the delivery of a functional Common Data Model and a validated assessment catalog. The solicitation was posted on October 15, 2026, with a response deadline of October 29, 2026. Performance is associated with the Dha Enterprise Medical Support Ems-Cd.

Research and Development in the Social Sciences and Humanities

POSTED

DEADLINE

DoW IL5 Cloud Environment Implementation & MigrationThe DoW IL5 Cloud Environment Implementation and Migration is a subcontract under the Department of Defense for the Dha Enterprise Medical Support Ems-Cd. The project focuses on the architectural setup, deployment, and configuration of software platforms for prime contractors on Defense Health Agency projects. Key technical requirements include configuring cloud-native infrastructure within GSA cloud.gov PaaS and DoW IL5 environments to support Zero Client Footprint and responsive design scaling for up to 50,000 simultaneous sessions. The scope of work involves executing critical data transition and rollover from legacy ANAM systems while adhering to NIST SP 800-145 and Cloud SRG standards. The ultimate goal is the delivery of a scalable, cloud-hosted environment. This opportunity falls under NAICS code 541512 and was posted on October 15, 2026, with a response deadline of October 29, 2026.

Computer Systems Design Services

POSTED

DEADLINE

RFI: Defense Health Agency (DHA) Cognitive Monitoring Tool

Solicitation # HT001527RFI1015

The Defense Health Agency (DHA), Enterprise Medical Services - Contracting Division, is issuing a Request for Information (RFI) under solicitation number HT001527RFI1015 to identify vendors capable of implementing an improved Cognitive Monitoring Tool (CMT). This tool is intended to replace the legacy Automated Neuropsychological Assessment Metrics (ANAM) system and will be used for cognitive baselining, periodic monitoring, pre-deployment screening, clinical evaluations, and post-deployment assessments. A critical requirement of the system is the ability to conduct mass, unsupervised point-of-injury cognitive screening for undetected mild Traumatic Brain Injury (mTBI) at the tactical edge. The solution must be a cloud-native platform compatible with GSA’s cloud.gov and capable of operating within a DoW IL5 cloud environment. Key technical requirements include the ability to support unsupervised self-administration by Service members and the scalability to handle at least 50,000 simultaneous assessment sessions across the deployed force. Compliance is mandatory for HIPAA, the DoW Risk Management Framework (RMF), DODI 8528.01, and CMMC requirements per DFARS clauses 252.204-7012 and 252.204-7021. The system must also utilize a strict Role-Based Access Control (RBAC) framework. Interested respondents under NAICS code 513210 must submit a PDF narrative response of no more than ten pages, plus an assessment catalog, to the designated Contracting Officer and Contract Specialist by 5:00 PM CST on October 29, 2026. Submissions must use the subject line RFI Response – DHA Cognitive Assessment Tools and should include company information, technical capabilities, past performance, and standard commercial pricing models. This RFI is for informational and planning purposes only and does not constitute a formal solicitation or a binding contract.

Software Publishers

POSTED

DEADLINE

Data Management and Reporting Services for Cognitive AssessmentsThe contract entails the secure management, de-identification, reporting, and integration of ANAM cognitive assessment data into Department of Defense health databases, ensuring compliance with federal data protection standards. It requires the contractor to handle sensitive cognitive assessment information with rigorous confidentiality protocols, anonymizing data to protect individual identities while maintaining data integrity for analytical and clinical purposes. The work involves developing and operating systems to collect, store, process, and transmit ANAM results in alignment with DoD health informatics requirements, supporting ongoing monitoring of service member cognitive health across military operations and training environments. The contract is classified as a subcontract under NAICS code 518210, indicating focus on data processing and hosting services, and is performance-based at Falls Church, Virginia, with a posting date of August 5, 2026. The scope includes end-to-end data lifecycle management from acquisition through reporting, ensuring seamless integration with existing DoD medical record systems. The contractor must adhere to strict security and privacy mandates to support the Defense Health Agency’s mission of enhancing cognitive health surveillance and readiness, and deliver timely, accurate, and auditable reports to inform medical decision-making and policy development within the military health system.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Technical Support and Help Desk Services for ANAM PlatformThe contract covers the provision of remote technical support, user training, troubleshooting, and ongoing maintenance services for the ANAM neurocognitive assessment platform at military installations. The work is focused on ensuring the platform remains fully operational, accessible, and properly utilized by authorized personnel across Defense Department facilities, with a primary place of performance in Falls Church, Virginia, under NAICS code 541512 for other computer-related services. The subcontractor will be responsible for delivering responsive help desk support, conducting system updates, resolving technical issues remotely, and providing training to military users to maintain proficiency with the neurocognitive assessment tools. The contract is issued under the Department of Defense's Dha Enterprise Medical Support Ems-Cd with no solicitation number or set-aside designation specified. The services must be performed remotely and are designed to sustain mission readiness by preserving the integrity and functionality of the ANAM system, which is critical for cognitive health monitoring of military personnel. Although no point of contact is listed, the work is expected to align with DoD standards for data security, compliance, and interoperability across defense medical systems, with performance centered on minimizing downtime and maximizing user adoption across deployed locations.

Computer Systems Design Services

POSTED

DEADLINE

Enterprise Software Licensing and Deployment SupportThe contract entails the enterprise-wide provision of ANAM software licenses, user provisioning, and system integration support for cognitive assessments used by the U.S. military to evaluate potential mild traumatic brain injuries. The work focuses on deploying and maintaining a standardized, secure software platform across military medical systems to ensure consistent, reliable, and timely cognitive performance tracking for service members. Integration support includes ensuring compatibility with existing DoD health information infrastructure, managing user access and authentication, and providing ongoing technical assistance to maintain operational readiness. The contract is classified as a subcontract under NAICS code 511210, indicating it involves software publishing and related services, and is managed by the DHA Enterprise Medical Support EMS-CD under the Department of Defense. Performance is required at Falls Church, Virginia, with a posted date of August 5, 2026, suggesting this is a future solicitation for services not yet awarded. The scope is mission-critical, supporting the assessment and monitoring of cognitive health in military personnel, which directly informs medical decision-making, return-to-duty protocols, and long-term health management for those exposed to blast or impact events.

Software Publishers

POSTED

DEADLINE

Enterprise Deployment and Technical SupportThis contract encompasses the enterprise-wide deployment and ongoing technical support for a cognitive monitoring tool within Department of Defense (DoD) networks. It includes comprehensive services such as user training and support to facilitate adoption across the organization. The effort aims to ensure seamless integration and effective use of the monitoring tool to enhance operational capabilities. The subcontract falls under the NAICS code 541519, which pertains to other computer-related services, indicating a focus on specialized technical expertise. The contracting agency listed is the DHA Enterprise Medical Support (EMS-CD) under the Department of Defense, with the place of performance located in Hampton, identified by the postal code TW12 2EW. Although no specific solicitation number or set-aside information is provided, the contract was posted on April 23, 2026, highlighting an active period for supporting DoD’s technology infrastructure in medical support environments.

Other Computer Related Services

POSTED

DEADLINE

Human Performance Optimization (HPO) Analytics EngineThe contract focuses on the development of advanced analytics capabilities aimed at optimizing human performance, with particular emphasis on cognitive readiness assessments and the analysis of performance trends during operational missions. This initiative seeks to enhance decision-making and operational effectiveness by leveraging data-driven insights into human cognitive and physical performance. The work will support the Department of Defense through the Dha Enterprise Medical Support Ems-cd agency, specifically targeting improvements in mission success rates and personnel readiness. The subcontract falls under the NAICS code 541690, which pertains to scientific and technical consulting services, and is set to be performed primarily in Hampton, with a referenced postal code TW12 2EW. The project was posted on April 23, 2026, and aims to deliver innovative tools that facilitate better understanding and monitoring of human performance variables in demanding operational environments, ultimately contributing to the health and effectiveness of personnel involved in defense missions.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

API Integration with Department of Warfighting (DOW) SystemsThe contract involves the design and implementation of secure API integrations between a cognitive monitoring tool and Department of Warfighting (DOW) systems. The objective is to enable seamless interoperability and efficient data exchange, enhancing warfighter resilience through improved system connectivity and information sharing. This subcontract, posted on April 23, 2026, falls under the NAICS code 541512, which pertains to custom computer programming services, and is managed by the Dha Enterprise Medical Support EMS-CD agency within the Department of Defense. The place of performance is identified as Hampton, with a postal code of TW12 2EW. While specific details such as solicitation number and points of contact are not provided, the contract emphasizes the critical nature of secure data integration in support of military operational readiness. The work supports the broader mission of the Department of Defense to leverage advanced technology for enhanced medical support and warfighter effectiveness.

Computer Systems Design Services

POSTED

DEADLINE

Cloud-Native Cognitive Monitoring Platform DevelopmentThe contract involves the development and deployment of a cloud-native cognitive monitoring platform accessible via web browsers without requiring any client-side installation, ensuring a zero-footprint solution. This approach leverages modern cloud architecture to provide seamless cognitive monitoring capabilities, enhancing user accessibility and simplifying deployment across various environments. The platform is designed to support the needs of cognitive assessment in medical or related fields, likely emphasizing real-time monitoring and data analysis. Awarded by the Department of Defense through the Dha Enterprise Medical Support EMS-CD office, the subcontract focuses on leveraging NAICS code 518210, which pertains to data processing and related services. The work will be performed primarily in Hampton, under the postal code TW12 2EW. By employing a browser-based solution, the contract aims to deliver advanced cognitive monitoring tools that are scalable, secure, and easy to maintain, aligning with the DoD’s requirements for efficient and innovative health technology solutions.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS