Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Security Compliance & Audit Services

Active

State & Local

Response Deadline10/31/2026, 12:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Security Compliance and Audit Services subcontract involves performing security validation and compliance auditing for prime contractors working on projects for the Oregon Department of Administrative Services. The primary scope of work includes validating system configurations against Statewide IT Control Standards and ensuring that logging practices adhere to CJIS, CMS, HIPAA, and IRS 1075 standards. Additionally, the contractor is responsible for conducting vulnerability monitoring and scanning, as well as delivering comprehensive security documentation and compliance validation reports. This opportunity is categorized under NAICS code 541690 and is based in Salem, Oregon. Interested parties should note that the solicitation was posted on October 1, 2026, with a response deadline of October 31, 2026.

General Info

Security compliance auditing and validation services for Oregon Department of Administrative Services projects.

Agency

Oregon → Department of Administrative Services

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Salem, OR, 97301, USA

Set-Aside

NONE

Documents

This scope was carved out of S-10700-00017534.

The full solicitation package (23 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Request for Proposal: Secure Services Edge (SSE) Solution

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 1

subcontract

Response DeadlineOct 31

Submission deadline

Response Deadline

10/31/2026, 12:00:00 AM UTCin 3 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyOregon → Department of Administrative Services

ContactsNo contacts available

OfficeN/A

Organization / AgencyOregon → Department of Administrative Services

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security validation and compliance auditing for prime contractors on Oregon Department of Administrative Services projects. Validates configurations against Statewide IT Control Standards (Attachment J) and ensures logging meets CJIS, CMS, HIPAA, and IRS 1075 standards. Conducts vulnerability monitoring and scanning. Delivers compliance validation reports and security documentation.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. Eligible firms include SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by the deadline of November 17, 2026. Primary inquiries should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 3 hours ago

DEADLINE

Senior Advisor 2 for the Helping to End Addiction Long-term Initiative, or NIH HEAL Initiative to act as Subject Matter Expert (SME) with Pharmaceutical Development and Pain Expertise

Solicitation # 7571PSQ00012

Omas Strategic Buying Center - Professional Services

POSTED

about 10 hours ago

DEADLINE

Senior Advisor 2 Services for the NINDS Helping to End Addiction Long-term Initiative, or NIH HEAL Initiative for the Pain Therapeutics Development Program (PTDP) External Oversight Committee (EOC) Subject Matter Expert (SME) Services

Solicitation # 7571PS27Q00011

Omas Strategic Buying Center - Professional Services

POSTED

about 10 hours ago

DEADLINE

Comprehensive Zoning Ordinance Review and Revision Services

Solicitation # 26-REQ-129

Effingham County is seeking an experienced planning and land use consultant under solicitation 26-REQ-129 to provide comprehensive review and revision services for its Unified Development Ordinance (UDO) and Zoning Ordinance. The project focuses on modernizing and reorganizing the ordinance, specifically targeting residential zoning districts R-1 through R-6, multifamily density, RV residency, and the separation of zoning standards from engineering standards. The selected consultant will be responsible for delivering redline and clean adoption-ready drafts, a summary memorandum explaining the rationale for substantive changes, and providing professional support during at least two Board of Commissioners meetings. The contract will be awarded based on a points-based scoring method considering price and other advantageous factors, with a requirement for a lump-sum fee proposal. Qualified vendors must demonstrate a proven track record by providing three similar projects completed within the last five years and identifying a dedicated project manager and key personnel. Compliance requirements include maintaining liability and workman's compensation insurance, providing a drug-free workplace certification, and signing an E-Verify affidavit. Proposals are limited to 12 pages and must be submitted via the County's eProcurement Portal by October 28, 2026.

Development Services

POSTED

DEADLINE

Technical Writer / Safety Consultant (Water Systems)This subcontract opportunity with the State of Idaho seeks a Technical Writer and Safety Consultant to support water system projects for the Idaho Department of Correction. The selected contractor will be responsible for developing comprehensive safety manuals and standard operating procedures for prime contractors, with a specific focus on creating facility-specific guidelines for drinking water distribution and lagoon management to ensure full regulatory compliance. The project falls under NAICS code 541690 and requires the delivery of finalized SOPs and safety documentation. Interested parties must submit their responses by November 10, 2026, following the posting date of October 26, 2026.

POSTED

DEADLINE

Technical Manuals and Documentation ServicesThis subcontract for Technical Manuals and Documentation Services involves the creation and delivery of comprehensive maintenance and repair documentation for prime contractors working on Fayette County Public Schools transportation projects. The scope of work includes developing digital or physical manuals that cover critical technical areas such as engine repair, chassis repair, electrical systems, ABS, and parts. To ensure high-quality deliverables, the contractor must utilize professional technical writing software and digital publishing tools. The project is managed under the Fayette County Board of Education in Georgia. A critical requirement of the contract is strict adherence to ADA and Section 508 accessibility standards for all produced materials. Interested parties must submit their responses by the deadline of December 3, 2026.

Fayette County Board of Education

POSTED

DEADLINE

in about 1 month

Data Safety and Monitoring Board (DSMB) SupportThis small business set-aside subcontract provides essential administrative and technical support to Data Safety and Monitoring Boards for prime contractors conducting NIH/NHGRI clinical trials. The scope of work includes coordinating DSMB meetings, managing the flow of blinded and unblinded data, and preparing critical safety monitoring reports and meeting minutes. Performance will take place in Bethesda, and the contractor must possess specific experience with DSMB charters. Due to the nature of the clinical data involved, a mandatory Business Associate Agreement is required to ensure full HIPAA compliance. Interested parties must submit their responses by November 13, 2026, for this opportunity managed under the Department of Health and Human Services and the National Institutes of Health.

National Institutes Of Health Olao

POSTED

DEADLINE

Program Support for the Strategic Environmental Research and Development Program (SERDP) and the Environmental Security Technology Certification Program (ESTCP)

Solicitation # W912HQ26RA001_0003

Solicitation W912HQ26RA001 is for program support services to the Strategic Environmental Research and Development Program (SERDP) and the Environmental Security Technology Certification Program (ESTCP) under the Department of Defense. The objective is to assist in developing and demonstrating technologies that meet environmental and energy requirements through reports, studies, document reviews, program tracking via the System for Environmental Management (SEMS), and multi-media outreach. The contract structure consists of a one-year base period and four one-year option periods, utilizing fixed, fully loaded rates for labor. Performance is primarily conducted at the contractor's facility, with occasional travel required. Award will be based on a subjective tradeoff of the best value proposal, where non-price factors are significantly more important than price. Key evaluation criteria include technical understanding and approach, personnel experience for key roles such as the Project Manager and IT Specialist, past performance, and small business participation. Offerors must submit a five-volume proposal in PDF format, adhering to strict page limits and submission guidelines. This specific amendment updates the period of performance and incorporates new clauses from the Revolutionary FAR Overhaul while removing inapplicable commercial service clauses. Offerors must acknowledge receipt of this amendment by October 28, 2026.

POSTED

DEADLINE

in about 22 hours

Clinical Research Support and Collaboration for NHGRI Protocols

Solicitation # 75N98026R00034

The National Institutes of Health Office of Acquisitions and Logistics Management, on behalf of the National Human Genome Research Institute, is soliciting proposals for an Indefinite Delivery, Indefinite Quantity (IDIQ) contract to provide comprehensive clinical research support and collaboration services. This small business set-aside acquisition focuses on four primary task areas: protocol monitoring and data management, regulatory support for IND and IDE submissions, Data Safety and Monitoring Board (DSMB) support, and statistical expertise. The contractor must provide qualified personnel experienced in clinical trial design and regulatory requirements, with specific expertise in rare diseases, genetic conditions, gene therapy using AAV9 vectors, and both pediatric and adult populations. The contract features a three-year ordering period beginning January 1, 2027, with performance primarily occurring at the contractor's site and some travel to the NIH campus in Bethesda, Maryland. Award will be made on a competitive best value basis using a tradeoff approach, where non-price factors—including personnel, technical and management approach, offeror experience, and past performance—are significantly more important than cost. Task orders will be issued as either firm fixed-price or time and materials. The contract includes stringent requirements for cybersecurity, the handling of Controlled Unclassified Information, and compliance with Section 508 accessibility standards for all electronic deliverables. Proposals are due by November 13, 2026, and must be submitted via the NIH electronic Contract Proposal Submission website in separate technical and business volumes.

National Institutes Of Health Olao

POSTED

DEADLINE

911-988 Transfer Protocol ConsultingThe 911-988 Transfer Protocol Consulting subcontract involves the development and optimization of call transfer protocols for prime contractors working on California Department of Health and Human Services emergency service projects. The selected provider will analyze existing 911-988 transfer protocols and implement industry best practices for emergency call routing, utilizing PSAP workflows and telephony routing protocols. Expertise in NENA or APCO standards is required to ensure all routing mechanisms meet established emergency communication benchmarks. Key deliverables for this engagement include comprehensive transfer protocol documentation, best practice reports, and detailed workflow diagrams. The project is based in West Sacramento, California, under NAICS code 541690. Interested parties must submit their responses by December 5, 2026.

Sec., Health & Human Services

POSTED

DEADLINE

in about 1 month

Project Evaluation and Impact Assessment SpecialistThe Project Evaluation and Impact Assessment Specialist subcontract supports the Department of State Bureau of Near Eastern Affairs by measuring success and documenting outcomes for prime contractors operating on projects in Jordan. The selected provider will be responsible for developing key performance indicators, conducting impact surveys, and utilizing data analysis software to draft performance reports in strict accordance with 2 CFR 200 Appendix XII. This engagement requires specialized expertise in federal grant reporting and performance monitoring to ensure all deliverables meet government standards. The primary outputs include the delivery of comprehensive final impact reports and regular quarterly performance reports. The opportunity is categorized under NAICS code 541690, with a response deadline set for September 30, 2027.

Bureau Of Near Eastern Affairs

POSTED

DEADLINE

CMMC Level 2 Compliance & CUI Management ConsultantThis subcontract opportunity is for a CMMC Level 2 Compliance and CUI Management Consultant to support prime contractors on Air Force projects through the AEDC Procurement Branch. The selected provider will perform cybersecurity auditing and management to ensure the protection of Controlled Unclassified Information and the achievement of CMMC Level 2 certification. Key responsibilities include establishing CUI management protocols, assisting with self-certification documentation, and managing security flow-down requirements for lower-tier partners. The contractor must possess CMMC Level 2 certification and utilize secure data handling systems and compliance auditing software to deliver required management plans and compliance reports. This effort falls under NAICS code 541690 and is managed by the Department of Defense. Interested parties must respond by November 12, 2026.

FA9101 Aedc Pkp Procrmnt Branch

POSTED

DEADLINE

More opportunities from Oregon → Department of Administrative Services

Same awarding agency

Fleet Reporting and Analytics ProviderThe Fleet Reporting and Analytics Provider subcontract, issued by the Oregon Department of Administrative Services, focuses on delivering advanced data analysis and reporting tools to monitor fuel efficiency and fleet spending for prime contractors on state projects. The selected provider will implement business intelligence software to create custom reporting dashboards, identify operational waste, and offer predictive analytics to assist with budgeting. Key deliverables include the development of a functional reporting dashboard and the submission of regular expenditure reports. The work is centered in Salem, Oregon, under NAICS code 541512. Interested parties must respond by November 5, 2026, following the posting date of October 19, 2026.

Computer Systems Design Services

POSTED

DEADLINE

E-Procurement Integration ServicesThe E-Procurement Integration Services subcontract, managed by the Oregon Department of Administrative Services, focuses on the technical integration of fleet card platforms with e-procurement systems for prime contractors operating on State of Oregon projects. The primary objective is the development of APIs and data interfaces designed to synchronize transaction data and automate the billing flow into existing financial systems, resulting in a fully functional and automated data interface. This project is categorized under NAICS code 541511 and will be performed in Salem, Oregon. Interested parties should note that the solicitation was posted on October 19, 2026, with a response deadline set for November 5, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Fleet Card Program AdministratorThe Department of Administrative Services for the State of Oregon is seeking a Fleet Card Program Administrator to manage a comprehensive fuel and charge card system for prime contractors working on government vehicle projects. The selected subcontractor will be responsible for issuing cards to authorized personnel, maintaining a network of participating fuel stations, and overseeing payment processing and credit lines through a secure gateway to ensure operational card accounts. This subcontract opportunity is categorized under NAICS code 522291 and will be performed in Salem, Oregon. Interested parties must submit their responses by the deadline of November 5, 2026, to provide the necessary infrastructure for an active and managed fleet card program.

Consumer Lending

POSTED

DEADLINE

Request for Information Only for Fleet Card Services

Solicitation # S-10700-00018220

The State of Oregon Department of Administrative Services is issuing an informal Request for Information, solicitation number S-10700-00018220, to gather industry feedback regarding Fleet Card Services. This process is intended to aid in the development of future competitive solicitations and will not result in immediate contract awards or evaluations. The RFI specifically seeks information on implementation capabilities, integration with e-procurement systems, and industry-standard security, privacy, and compliance requirements. Additionally, the state is requesting input on common insurance coverage expected within the industry. Interested parties must submit concise responses without marketing materials by November 4, 2026, at 5:00 PM. Submissions must be sent electronically via OregonBuys or email to the primary point of contact, Jennifer Jolley. Required submission details include the company name, contact person, phone number, and email address. The place of performance is listed as Salem, Oregon.

Credit Card Issuing

POSTED

DEADLINE

Bulk Liquid Chemical Hauling and Delivery (Oregon Statewide)This subcontract involves the hauling and delivery of bulk liquid magnesium chloride for prime contractors working on Oregon Department of Administrative Services highway projects. The selected provider will be responsible for transporting bulk liquid chemicals from the point of origin to 104 designated storage sites throughout Oregon under FOB Destination terms. The scope of work requires the use of specialized bulk liquid tankers and offloading equipment compatible with state storage tanks. Personnel must possess a Commercial Driver's License with the necessary chemical hauling endorsements to ensure safe and compliant transport. The project is centered in Salem, Oregon, and falls under NAICS code 484220.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Bulk Supply of Corrosion-Inhibited Liquid Magnesium ChlorideThis subcontract involves the bulk supply of corrosion-inhibited liquid magnesium chloride for prime contractors working on Oregon Department of Administrative Services highway projects. The selected provider is responsible for manufacturing or sourcing a deicing chemical that meets strict corrosion-inhibited standards and is officially listed on the ClearRoads Qualified Product List. The scope of work includes the delivery of approved chemicals to designated state sites or loading points, with performance centered in Salem, Oregon. Interested parties must respond by October 31, 2026, to provide these essential materials under NAICS code 325920.

Explosives Manufacturing

POSTED

DEADLINE

Deicer Chemical for use on Oregon Highways

Solicitation # S-10700-00017286

The Oregon Department of Administrative Services, State Procurement Services, is soliciting a price agreement for the supply and delivery of corrosion-inhibited, liquid magnesium chloride to be used for melting ice on highways throughout the state. The contract involves delivery to 104 storage sites across Oregon with freight terms set as FOB Destination. The initial term of the agreement is four years, with renewal options that can extend the total duration to a maximum of ten years. The state intends to award the agreement to the lowest responsive and responsible bidder capable of supplying the entire state, although multiple awards by district may be issued if it serves the state's best interest. To be eligible, products must be listed on the current Qualified Product List and meet all specified technical requirements. Evaluation is based on minimum qualifications, responsiveness, responsibility, and price, with specific price preferences applied for goods processed in Oregon, benefit companies, and reciprocal state preferences. Bidders must submit a comprehensive package via OregonBuys, including a bid cover sheet, reference checks, a responsibility inquiry, and a detailed pricing form in Excel. Successful bidders must also comply with Oregon tax laws, non-discrimination policies, and safety standards, including OSHA and state health requirements.

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

Technical Training & Knowledge TransferThis subcontract for Technical Training and Knowledge Transfer is issued by the Oregon Department of Administrative Services to provide specialized technical instruction for prime contractors. The scope of work involves the creation of administrator modules, support-team runbooks, and user guidance, culminating in a comprehensive Training Plan and the execution of training sessions. A critical requirement of the contract is ensuring that all digital materials adhere to WCAG 2.1 Level AA accessibility standards and that thorough knowledge transfer sessions are conducted for state personnel. The project is categorized under NAICS code 611430 and will be performed in Salem, Oregon. Interested parties should note that the solicitation was posted on October 1, 2026, with a response deadline of October 31, 2026.

Professional and Management Development Training

POSTED

DEADLINE

SSE Implementation & Integration ServicesThis subcontract for SSE Implementation and Integration Services supports prime contractors on projects for the Oregon Department of Administrative Services in Salem. The scope of work involves the technical deployment and integration of Security Service Edge solutions, specifically focusing on the configuration of application policies, device-posture controls, and identity/MFA integration. The selected provider will be responsible for executing a coordinated onboarding process for 50,000 users utilizing API integrations and Infrastructure as Code tools to deliver a validated SSE environment and Target Architecture. Due to the nature of the agency's data, the contractor must maintain strict familiarity with CJIS, HIPAA, and IRS 1075 compliance standards. This opportunity falls under NAICS code 541512 and requires a response by October 31, 2026.

Computer Systems Design Services

POSTED

DEADLINE

SSE Software Licensing (SaaS)This subcontract for SSE Software Licensing (SaaS) provides cloud-based Security Service Edge platform licenses for prime contractors working on Oregon Department of Administrative Services projects. The agreement covers the delivery of active software subscriptions for a multi-tenant enterprise environment designed to support 50,000 users via a global edge infrastructure. The platform must integrate critical security capabilities, including Zero Trust Network Access, Secure Web Gateway, Cloud Access Security Broker, Data Loss Prevention, and Firewall as a Service. The service provider is required to adhere to Statewide Security Standards and ensure full support for CJIS, HIPAA, and IRS 1075 compliance. Performance for this contract is centered in Salem, Oregon, under NAICS code 513210. The solicitation period is open from October 1, 2026, through October 31, 2026.

Software Publishers

POSTED

DEADLINE

Request for Proposal: Secure Services Edge (SSE) Solution

Solicitation # S-10700-00017534

The Oregon Department of Administrative Services, on behalf of Enterprise Information Services, is soliciting proposals for a comprehensive Secure Service Edge (SSE) solution under solicitation number S-10700-00017534. The objective is to implement a Zero Trust, identity- and context-aware security framework that provides secure access to applications and data across cloud, on-premises, and hybrid environments. The scope of work includes the delivery of ZTNA, SWG, CASB, and DLP capabilities, along with integration, testing, training, and maintenance services. The anticipated initial contract term is five years, with a focus on centralized policy administration, threat prevention, and adherence to Statewide Security Standards and WCAG 2.1 Level AA digital accessibility requirements. The evaluation process consists of two rounds. Round 1 focuses on performance, scalability, and resilience (20%), vendor reputation and support (10%), and a five-year price proposal (5%). Round 2 involves demonstrations, interviews, and the submission of a Best and Final Offer. For pricing comparison, the state uses an evaluation scenario based on 50,000 users across various components, including DNS security and Firewall as a Service. Proposals must be submitted via OregonBuys and are limited to 60 pages. Award preferences may be given to resident offerors or those providing goods manufactured with recycled materials. Acceptance of the solution is subject to a 30-day testing period to validate mandatory requirements, operational readiness, and security compliance.

Computer Systems Design Services

POSTED

DEADLINE

Pavement Restoration (Civil/Concrete)This subcontract for Pavement Restoration (Civil/Concrete) involves the restoration of pavement impacted by security installations for prime contractors working on Department of Administrative Services SPS Justice Building projects in Salem, Oregon. The scope of work requires the delivery of a fully restored parking lot surface, utilizing asphalt or concrete patching and restoration techniques. All work must be performed in strict accordance with the specifications outlined in Attachment C Plans and Drawings, specifically adhering to Sheet Note 3 on Sheet C200 and Detail S on Sheet C400. The project falls under NAICS code 237310, with a response deadline set for October 28, 2026.

Highway, Street, and Bridge Construction

POSTED

about 1 month ago

DEADLINE

in about 24 hours

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS