Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Security Assessment and HECVAT Compliance Support

Active

State & Local

Response Deadline11/05/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Security Assessment and HECVAT Compliance Support involves performing security assessments for prime contractors on Montana State University projects. The primary objective is to conduct security audits and utilize the Higher Education Community Vendor Assessment Toolkit framework to validate the security postures of cloud providers and subprocessors. The selected provider must adhere to the University Expanded Data Security Terms and is responsible for delivering a validated HECVAT report and security certification. This opportunity is listed under NAICS code 541519, with a response deadline of November 5, 2026.

General Info

Subcontract for security assessments and HECVAT compliance support for Montana State University projects.

Agency

MontanaView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of MSU-RFP-2027-0866.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

MSU E-Commerce Platform

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 23

subcontract

Response DeadlineNov 5

Submission deadline

Response Deadline

11/05/2026, 09:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyMontana

ContactsNo contacts available

OfficeN/A

Organization / Agency

Montana

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security assessments for prime contractors on Montana State University projects. Conducts security audits and completes the Higher Education Community Vendor Assessment Toolkit (HECVAT) to validate cloud provider and subprocessor security postures using the HECVAT framework. Requires adherence to University Expanded Data Security Terms. Delivers a completed and validated HECVAT report and security certification.

Similar Contracts

Same NAICS industry code

D--Department of Interior, Office of Inspector General Automated Manual Processes

Solicitation # 140D0426Q0749

Ibc Acq Svcs Directorate (00004)

POSTED

about 4 hours ago

DEADLINE

76--Department of Interior, Office of Human Capital, cyberFEDS® on the Web subscrip

Solicitation # 140D0426Q0578

Ibc Acq Svcs Directorate (00004)

POSTED

about 4 hours ago

DEADLINE

Pure Storage Warranty and Support ServicesThis subcontract provides Pure Storage Warranty and Support Services for prime contractors working on California Health and Human Services Agency projects under the Office of Technology and Solutions I. The agreement covers 36 months of Evergreen forever subscriptions and support for Pure Storage FlashArray FA-X20R2-9.6TB components, ensuring active warranty coverage and continuous support access. Key service requirements include 24/7 technical support and Next Business Day delivery for all replacement parts. To be eligible, providers must hold authorized Pure Storage partner or OEM status and undergo required background checks. The contract is categorized under NAICS code 541519.

Ofc Technology and Solutions I

POSTED

about 16 hours ago

DEADLINE

Cybersecurity Maturity & Roadmap SpecialistThis subcontract for the Board of Education of School District No 39 in British Columbia seeks a Cybersecurity Maturity and Roadmap Specialist to evaluate the cybersecurity posture of prime contractors. The selected provider will conduct maturity assessments, identify critical gaps in tooling and investment, and offer risk management recommendations tailored to the specific challenges of the K-12 public sector. The primary deliverables for this engagement are a comprehensive Cybersecurity Roadmap and a Maturity Assessment Report. Interested parties must submit their responses by October 7, 2026, under NAICS code 541519.

The Board of Education of School District No 39 (Vancouver)

POSTED

about 20 hours ago

DEADLINE

Software Maintenance and Technical SupportThis subcontract for Software Maintenance and Technical Support focuses on providing ongoing technical assistance and maintenance for access certification solutions used by prime contractors on State of North Dakota projects. The scope of work includes the application of software patches, performing system upgrades, and managing a dedicated help desk to resolve service disruptions. Additionally, the provider is responsible for managing release cycles to ensure all customizations are maintained. Key deliverables include the provision of maintenance reports, regular software updates, and the resolution of support tickets. The opportunity was posted on September 23, 2026, with a response deadline of October 14, 2026. This engagement falls under NAICS code 541519 and is managed by the State of North Dakota.

POSTED

about 21 hours ago

DEADLINE

ADA/WCAG Accessibility Compliance TestingThis subcontract for ADA/WCAG Accessibility Compliance Testing involves providing automated and manual accessibility testing for digital transformation projects within the Village of Schaumburg. The selected provider will use screen readers such as JAWS and NVDA, along with automated scanners, to identify and fix gaps in assistive technology and keyboard navigation. The primary goal is to ensure all digital assets strictly adhere to ADA requirements and WCAG 2.1 Level AA standards, resulting in the delivery of comprehensive accessibility audit reports and a fully compliant website. Managed by the Communications Department in Illinois under NAICS code 541519, the opportunity was posted on September 23, 2026. Interested parties must submit their responses by the deadline of October 16, 2026.

Communications Department

POSTED

about 22 hours ago

DEADLINE

Application Support & MaintenanceWM5G Limited is seeking a subcontractor for an Application Support and Maintenance contract to provide ongoing technical support and software maintenance for prime contractors working on NHS partner organization projects. The scope of work includes delivering Tier 2 and 3 technical support, implementing bug fixes, managing system updates, and conducting performance monitoring to ensure platform scalability across various regions. The selected provider will be responsible for utilizing ticketing systems and monitoring tools while adhering to strict service level agreements aligned with NHS operational requirements. The contract requires the delivery of consistent system availability and the maintenance of detailed technical support logs. Interested parties must respond by October 21, 2026, in accordance with the solicitation posted on September 23, 2026. This engagement falls under NAICS code 541519 and is focused on maintaining critical healthcare-related digital infrastructure.

POSTED

DEADLINE

IPTV Technical Support and MaintenanceThis subcontract for the City of San Antonio involves providing technical support and maintenance for the Convention and Sports Facility Department at the Alamodome. The selected vendor will be responsible for live production support during events, performing software updates, troubleshooting systems, and conducting on-site staff training. To qualify, the provider must hold specific certifications for the IPTV platform. The agreement ensures five years of system availability and requires the maintenance of detailed training logs. This opportunity falls under NAICS code 541519 and is managed through the Texas state procurement system.

CITY OF SAN ANTONIO

POSTED

DEADLINE

Cybersecurity Posture & Vulnerability RemediationThis subcontract opportunity with the Department of Homeland Security Air And Marine Contracting Division focuses on analyzing and improving the cybersecurity posture of MAST systems for prime contractors. The scope of work includes performing vulnerability remediation planning, incident reporting, and coordinating authorized testing through the use of specialized monitoring and scanning software. The selected provider will be responsible for delivering comprehensive cybersecurity reports and detailed vulnerability remediation plans. The project is based in Washington and requires personnel to hold specific cybersecurity certifications and obtain government-authorized access. Interested parties must respond by October 5, 2026, under NAICS code 541519.

Air And Marine Contracting Division

POSTED

DEADLINE

CMMC Level 2 Compliance and Cybersecurity ManagementThis subcontract focuses on providing cybersecurity infrastructure and auditing services for prime contractors operating on Defense Health Agency projects. The primary objective is the implementation of covered information systems in accordance with DFARS 252.204-7012, ensuring full compliance with FISMA and DoD Health Information Privacy Regulations. Key deliverables include the management of SPRS affirmations and the provision of a validated CMMC Level 2 certification. To qualify, providers must meet NIST SP 800-171 standards and possess CMMC Level 2 certification. The contract falls under NAICS code 541519 and is associated with the Department of Defense. Interested parties must submit their responses by November 6, 2026.

Defense Health Agency

POSTED

DEADLINE

in about 1 month

IBM Power/EMT Software Support ExtensionThis subcontract through the NASA IT Procurement Office provides software support extensions for prime contractors. The agreement specifically covers 24x7 Full Support Extensions for 62 units of IBM Power/EMT v1.4.1 Core Medium Tier, ensuring the delivery of active software support subscriptions and extensions. Eligible providers must hold authorized IBM software partner or OEM status and adhere to COTS software license price sharing terms. The opportunity is categorized under NAICS code 541519, with a response deadline of September 25, 2026.

NASA It Procurement Office

POSTED

DEADLINE

Cybersecurity Workforce SpecialistThis 8(a) set-aside subcontract, titled Cybersecurity Workforce Specialist, supports prime contractors on NCIS Cyber Directorate projects for the Department of Defense via the Navsup Flt Logistics Ctr Norfolk. The primary scope of work involves the configuration, installation, and maintenance of Network Forensic Analysis Tools on local networks, ensuring all activities comply with SECNAV M-5239.2 cybersecurity workforce qualifications. Additionally, the role requires performing digital evidence preservation in accordance with DoD and DoN mandates to deliver maintained forensic tools and detailed compliance reports. The opportunity is categorized under NAICS code 541519 and is based in Camp Pendleton, California. Interested parties must respond by October 2, 2026, following the posting date of September 23, 2026.

Navsup Flt Logistics Ctr Norfolk

POSTED

DEADLINE

More opportunities from Montana

Same awarding agency

E-Commerce System Implementation and IntegrationThis subcontract for E-Commerce System Implementation and Integration involves the configuration, integration, and deployment of e-commerce software for prime contractors on Montana State University projects. The scope of work includes executing system configurations, performing data migration, and conducting testing through the use of API connectors and integration middleware to ensure seamless connectivity with the university's financial and administrative systems. The project requires strict adherence to the University Expanded Data Security Terms and Contract Addendum to ensure a fully configured and integrated e-commerce system. Interested parties must respond by November 5, 2026, under NAICS code 541512 for the state of Montana.

Computer Systems Design Services

POSTED

about 20 hours ago

DEADLINE

in about 1 month

E-Commerce SaaS Platform License & HostingThis subcontract for an E-Commerce SaaS Platform License and Hosting provides a cloud-based Integrated E-Commerce Software System for prime contractors working on Montana State University projects. The agreement ensures the delivery of an active, hosted e-commerce engine designed for multi-campus accessibility across MSU-Bozeman, MSU-Billings, MSU-Northern, and Great Falls College MSU. To maintain compliance, the provider must possess a current HECVAT Full, HECVAT Lite, or an equivalent successor standard. The opportunity was posted on September 23, 2026, with a response deadline of November 5, 2026, and falls under NAICS code 518210.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 20 hours ago

DEADLINE

in about 1 month

MSU E-Commerce Platform

Solicitation # MSU-RFP-2027-0866

Montana State University System is soliciting proposals under solicitation number MSU-RFP-2027-0866 for an Integrated E-Commerce Software System to serve the Bozeman campus and its affiliate campuses in Billings, Northern, and Great Falls. This Software as a Service (SaaS) solution is subject to a response deadline of November 5, 2026. The procurement process requires offerors to submit a cost proposal and adhere to specific evaluation criteria, including a minimum score requirement. Awarded contractors must register in SmartBuyMSU, the university's Jaggaer-powered e-procurement system, and adhere to payment terms of Net 30. Compliance and security are central to this solicitation. Offerors must provide a current Higher Education Community Vendor Assessment Toolkit (HECVAT) and disclose all cloud providers, subprocessors, and managed-service providers with access to university data. Additionally, contractors must certify compliance with Montana law HB 356 regarding non-discrimination against firearms entities and trade associations. Proposals must also include a disclosure regarding the use of artificial intelligence in the development of the submission. The university requires adherence to expanded data security terms and the submission of a current W-9 and detailed remit-to information for payment processing.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Slash Piling and Debris RemovalThis subcontract for Slash Piling and Debris Removal involves providing the necessary labor and equipment to gather and pile forest thinning residue for prime contractors on Montana Fish, Wildlife and Parks projects. The contractor is responsible for utilizing excavators, loaders, or slash rakes to move debris into designated areas as specified by project maps and technical attachments, ensuring all completed piles are ready for final disposal. Strict adherence to forest fire regulations is required to maintain safety during all piling operations. This opportunity is listed under NAICS code 113310 with a response deadline of October 15, 2026. Interested parties can find further details and submission portals through the State of Montana's bidding system.

POSTED

DEADLINE

Precommercial Thinning ServicesThis subcontract for Precommercial Thinning Services involves performing selective tree removal to reduce forest stand density for prime contractors on Montana Fish, Wildlife and Parks projects. The selected provider will utilize chainsaws, brush saws, or specialized mechanical thinning equipment to deliver results that adhere to specific project maps and technical specifications. All work must comply with state forestry standards and the established forest fire regulations. Interested parties must submit their responses by October 15, 2026, for this project categorized under NAICS code 113310.

POSTED

DEADLINE

Thompson Chain of Lakes Precommercial Thinning

Solicitation # FWP-IFB-2027-1150R

The State of Montana, through the Department of Fish, Wildlife & Parks, is issuing solicitation FWP-IFB-2027-1150R as an Invitation for Bid for precommercial thinning and slash piling services at Thompson Chain of Lakes. The procurement opened on September 18, 2026, with a response deadline of October 15, 2026. Bidders are required to submit a lump sum cost proposal via the eMACS portal and must adhere to the project map, specific thinning and piling specifications, and forest fire regulations provided in the solicitation attachments. To be eligible for award, contractors must comply with several administrative and legal requirements, including registration with the Secretary of State and certification of non-discrimination against firearm entities and trade associations per 30-20-301, MCA. Bidders must also accept the state's standard terms and conditions, the draft contract, and specific warranty language for services. The contract is structured as an all-or-none award with payment terms of 0% Net 30. Primary administrative contact for this effort is Rhonda Peters.

Support Activities for Forestry

POSTED

DEADLINE

Snack Bar Equipment SupplyThis subcontract opportunity involves the supply or leasing of food service equipment for prime contractors working on State of Montana Legislative Branch snack bar projects. The scope of work includes the delivery, installation, and maintenance of commercial coffee machines, refrigerated display cases, microwave ovens, and POS hardware. All provided equipment must be UL listed and constructed from health department approved non-porous materials to ensure it is fully operational upon delivery. The project is managed by the State of Montana under NAICS code 423440. Interested parties must submit their responses by the deadline of October 2, 2026. Further details and application processes are available through the official SciQuest bidding portal.

Other Commercial Equipment Merchant Wholesalers

POSTED

DEADLINE

Prepared Meal and Pastry SupplyThis subcontract for Prepared Meal and Pastry Supply involves the preparation and delivery of ready-to-sell breakfast and lunch items for prime contractors supporting the State of Montana Legislative Branch snack bar projects. The scope of work includes utilizing a commercial kitchen to produce pastries, fruit, sandwiches, and salads for daily or weekly delivery to the State Capitol. To qualify, providers must maintain local health department permits and valid food handler certifications. The solicitation was posted on September 18, 2026, with a response deadline of October 2, 2026. This opportunity falls under NAICS code 722320 and is managed by the State of Montana.

POSTED

DEADLINE

Food and Beverage Wholesale SupplyThis subcontract for Food and Beverage Wholesale Supply involves the provision of raw ingredients, pre-packaged snacks, beverages, and prepared food components to prime contractors supporting State of Montana Legislative Branch snack bar projects. The selected provider is responsible for the regular delivery of both perishable and non-perishable inventory to the State Capitol building, utilizing refrigerated transport vehicles to ensure product integrity. The contractor must maintain strict adherence to FDA food safety compliance and hold all necessary health department certifications for food transport. This opportunity falls under NAICS code 424490 and is managed by the State of Montana, with a response deadline of October 2, 2026.

Other Grocery and Related Products Merchant Wholesalers

POSTED

DEADLINE

2027 Snack Bar at the Capitol

Solicitation # LEG-LimtSol-2027-0042NH

The State of Montana has issued limited solicitation LEG-LimtSol-2027-0042NH to secure a contractor for breakfast, lunch, and break food services at the State Capitol in Helena. The services will be provided at the snack bar located on the Third Floor West of the Capitol building to serve approximately 150 employees and 150 legislators. The period of performance begins on December 30, 2026, and continues through the Sine Die of the 2027 legislative session, which is expected to conclude no later than June 2027. Interested offerors must submit their responses by October 2, 2026, at 4:00 PM MDT. The submission package must include comprehensive company information, a letter of reference from a previous off-site event, a completed cost proposal, and a sample menu detailing the items and associated costs to be sold during the session. The primary point of contact for this solicitation is Nolan Harris.

Snack and Nonalcoholic Beverage Bars

POSTED

DEADLINE

Financial and Accounting Support ServicesThis subcontract for Financial and Accounting Support Services provides specialized financial management and accounting services for prime contractors working on projects for the State of Montana Healthcare and Benefits Division. Operating under NAICS code 541219 and commodity codes 1801 and 1805, the scope of work includes the delivery of comprehensive financial reports, accounting audits, and continuous financial management support. The opportunity was posted on September 18, 2026, with a response deadline of October 1, 2026. Interested parties can find further details and submission guidelines through the State of Montana's procurement portal on SciQuest.

Other Accounting Services

POSTED

DEADLINE

Baker Tilly Ongoing Support

Solicitation # DOA-SolSour-2027-0240MQB

The Montana Department of Administration, State Procurement Services Division, has issued an Intent to Sole Source notice under solicitation number DOA-SolSour-2027-0240MQB. The agency is considering a request from the Healthcare and Benefits Division to award a sole source contract to Baker Tilly for ongoing support services. This action is categorized under NAICS code 541611 and is not a request for competitive proposals. While the state intends to award the contract to Baker Tilly, other vendors who believe they can provide equivalent services are invited to challenge the sole source justification. Interested parties must submit a detailed written response via the eMACS portal by October 1, 2026, at 2:00 PM MDT. Submissions must include full company contact information and a thorough description of how the vendor can provide the services specified in the Letter of Intent. Anna Lubick serves as the primary point of contact for this procurement.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS