This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Security Compliance, Audit & Risk Management

Closed

Federal

Submission Closed08/04/2026, 01:00:00 PM EDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541611

New

Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services (RFP-VC-26-006), Inland Empire Utilities Agency (California)

Solicitation # RFP-VC-26-006

Hagerty Consulting, Inc. is seeking a Disadvantaged Business Enterprise (DBE) subcontractor to support an engagement with the Inland Empire Utilities Agency (IEUA) in California. The project focuses on enhancing the agency's operational resilience framework through the development and review of a Business Impact Analysis (BIA), Disaster Recovery Plan (DRP), and Business Continuity Plan (BCP), as well as the creation of recovery playbooks. The scope of work includes conducting assessments, participating in client workshops, and facilitating in-person tabletop exercises to identify response gaps. Preference is given to firms with expertise in IT/OT resilience and experience within the water, wastewater, or critical infrastructure sectors. This effort is funded by the Environmental Protection Agency (EPA), requiring strict adherence to federal regulations, including 40 CFR Part 33 for DBE programs, Title 2 CFR Part 200 Uniform Guidance, and Build America, Buy America (BABA) requirements. The contract is designated as a prevailing wage contract under the California Labor Code. The initial term is three years with an option to extend. Proposals must be submitted electronically via PlanetBids by November 17, 2026. Evaluation will be based on the offeror's past performance in the utility sector, personnel qualifications, proposed staffing methodology, and cost-effectiveness. Final deliverables must be submitted in both PDF and Word formats and must align with FEMA Continuity Guidance Circular and Business Continuity Planning frameworks.

Hagerty Consulting, Inc.

POSTED

DEADLINE

Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for IEUA

Solicitation # business-impact-analysis-disaster-recovery-business-continuity-plan-services-ieua

Carollo Engineers, Inc. is soliciting qualified disadvantaged business enterprise firms to provide specialized services for the Inland Empire Utilities Agency. The project focuses on the development and implementation of a Business Impact Analysis, Disaster Recovery Plan, and Business Continuity Plan. Specifically, the agency is seeking partners with expertise in risk assessment, emergency response and recovery planning, business continuity management, and information technology disaster recovery planning. This opportunity is set aside for various small business categories, including SBA certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone Small Businesses. The work will be performed in California under NAICS code 541611. Interested firms must submit their responses by November 16, 2026, and can coordinate with the primary point of contact, Paola Machan.

Carollo Engineers, Inc.

POSTED

DEADLINE

Business Impact Analysis/Disaster Recovery Plan/Business Continuity Plan Services

Solicitation # business-impact-analysisdisaster-recovery-planbusiness-continuity-plan-services

The Inland Empire Utilities Agency is seeking electronic proposals from qualified vendors to develop and implement a comprehensive Business Impact Analysis, Disaster Recovery Plan, and Business Continuity Plan. The primary objective of this initiative is to strengthen organizational resilience, safeguard critical business functions, and mitigate potential operational disruptions. This solicitation is open to various small business designations, including SBA certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone Small Businesses. Interested parties must submit their responses by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Veronica Cordova.

Inland Empire Utilities Agency

POSTED

DEADLINE

Colville Fuels, Coyote Ridge Golf Course — Consultant

Solicitation # Coyote-Ridge-Consultant-RFP-Final-with-Exhibits.pdf

Colville Fuels, LLC, an organization of the Confederated Tribes of the Colville Reservation, is seeking a qualified consultant to conduct a comprehensive operational, market, and capital needs assessment for the Coyote Ridge Golf Course in Washington. The primary objective is to develop an actionable operating and capital strategy, including a Fiscal Year 2027 operating plan and an integrated five-year development plan spanning 2027 through 2031. Key deliverables include a SWOT analysis, financial modeling with various performance scenarios, a capital improvement prioritization list, and a feasibility evaluation for the addition of an RV park. The project is a feasibility-level evaluation and specifically excludes detailed engineering, construction documents, and permit applications. Proposals are due by November 20, 2026, at 4 pm PST and should be submitted to CEO Chris O'Neil. Selection is based on a 100-point scoring system, with 85 points allocated to technical and cost factors—such as assessment approach, financial methodology, and team qualifications—and up to 15 points awarded based on Indian preference tiers per Colville Tribal Code Chapter 10-3. Respondents must provide a fixed fee or not-to-exceed cost proposal, a phased work schedule, and evidence of expertise in golf, food and beverage, and financial modeling. Final contract terms, including budget and schedule, will be negotiated with the successful respondent and are subject to legal review.

Confederated Tribes of the Colville Reservation

POSTED

DEADLINE

CTHCA, Emergency Management and Public Health Emergency Preparedness Plan Development

Solicitation # Emergency-Management-and-Public-Health-Emergency-Preparedness-Plan-Development.pdf

The Colville Tribal Health Care Authority is soliciting proposals from qualified consultants or firms to develop a comprehensive Emergency Management and Public Health Emergency Preparedness Plan for its clinics and tribal public health operations. The project, anticipated to span 16 weeks, focuses on strengthening preparedness, response, recovery, and the continuity of essential healthcare services. Key requirements include conducting a Hazard Vulnerability and Risk Assessment for threats such as wildfires, infectious diseases, and cybersecurity incidents, as well as creating a Continuity of Operations framework, emergency response procedures, and training materials. All deliverables must be submitted in editable electronic formats and final PDF, adhering to Tribal requirements and guidance from FEMA, CDC, and ASPR. Proposals are due by November 16, 2026, and will be evaluated on a 100-point scale considering technical approach, experience with Tribal entities, staff qualifications, and cost. The successful respondent must enter into a Tribal Consulting Contract and demonstrate respect for tribal sovereignty and confidentiality. Required submission documents include a cost proposal, a transmittal letter, staff résumés, and certifications regarding debarment and responsibility. Preference may be given to Tribal or Indian-owned businesses with TERO certification. Invoices are to be submitted no more frequently than monthly, with payments subject to the written acceptance of deliverables by a designated CTHCA representative.

Confederated Tribes of the Colville Reservation

POSTED

DEADLINE

Confederated Tribes of the Colville Reservation, Tribal Government Strategic Planning and Long-Term Governance Development

Solicitation # FINAL-RFP-for-Strategic-Planning-for-Tribal-Government.pdf

The Confederated Tribes of the Colville Reservation is seeking a qualified strategic planning consultant to develop a comprehensive, long-term strategic plan to guide the tribal government's future direction. This labor hour type contract focuses on establishing a clear vision and implementation strategies through the assessment of governmental structures, financial sovereignty, tribal rights, membership criteria, and economic development opportunities. Key deliverables include a project framework, a traditional territories and rights strategy, and a final strategic plan featuring a measurable implementation framework. The project is anticipated to last up to twelve months and must be tribally driven and culturally informed, requiring coordination with tribal legal counsel on treaty and jurisdictional matters. The selection process emphasizes reliability and effectiveness over the lowest cost, with a strong preference for Indian organizations and Indian-owned economic enterprises. A responsible Indian Bidder may be awarded the contract if their price is within 10 percent of the lowest non-Indian proposal. Proposals must include a detailed methodology, staff qualifications, and an itemized cost statement. Contract administration includes a no-assignment provision, strict confidentiality requirements, and the necessity of prior approval from the Tribes' COR for any changes to key personnel. Payments are generally due within 30 days of invoice receipt, with a general limit stating that payment for work performed must not exceed 10 percent unless otherwise agreed upon in writing.

Confederated Tribes of the Colville Reservation

POSTED

DEADLINE

Data and Performance Reporting Support Services

Solicitation # 2027-003

The County of San Mateo Health, Behavioral Health and Recovery Services (BHRS) is seeking a qualified contractor to provide data and performance reporting support services under solicitation 2027-003. The primary objective is to address capacity gaps in managing complex data needs and to support the organization's transition from the myAvatarNX (Avatar) Electronic Health Record system to Epic, with a target go-live date of late April 2027. The scope of work includes delivering ad hoc and recurring strategic and operational reports, managing regulatory reporting for the California Department of Health Care Services (DHCS), and providing staff training on reporting methodologies. The contract features a two-year base term with one option to extend for up to three additional years. Proposals are due by November 13, 2026, and will be evaluated based on firm qualifications, project approach, and price, with preferential scoring available for local, small, or micro businesses. A budget cap of 200,000 dollars is noted for the two-year term, as amounts exceeding this threshold require Board of Supervisors approval. Qualified proposers must demonstrate at least three years of experience within the last five years providing similar services to public-sector health agencies and specific expertise in myAvatar and myAvatarNX tables. The agreement mandates strict compliance with HIPAA, the Americans with Disabilities Act, and California Labor Code prevailing wage requirements.

POSTED

DEADLINE

Wellness Program Administration & Participant SupportThis subcontract for Wellness Program Administration and Participant Support involves the administrative management of the Wellness Incentive Program for prime contractors working on City of Phoenix employee wellness projects. The selected provider will be responsible for designing wellness challenges, managing leaderboards, and providing direct customer support to participants. A critical component of the role is the generation of reward fulfillment and taxable winnings files that strictly adhere to City payroll specifications. Due to the nature of the health data involved, the contractor is required to maintain HIPAA Certification to ensure compliance and privacy. The primary objectives of the contract are the delivery of managed wellness challenges and the production of accurate payroll files. This opportunity is managed through Finance Central Procurement in Arizona, with a response deadline set for December 10, 2026.

Finance Central Procurement

POSTED

DEADLINE

Airport Security Coordinator (ASC) On-Call Services - Santa Fe Regional Airport

Solicitation # FY27-RFP-030

The City of Santa Fe is soliciting proposals under solicitation FY27-RFP-030 for on-call Airport Security Coordinator (ASC) services at the Santa Fe Regional Airport. The selected firm will provide professional support and guidance on an as-needed basis to ensure Transportation Security Administration (TSA) regulatory compliance, maintain security plans, manage compliance documentation, and assist with audits and inspections. The resulting contract will have an initial term of four years, with options to renew for up to eight additional years. The procurement utilizes a best value selection process based on a three-phase evaluation of technical expertise, project approach, interviews with key personnel, and cost. Proposals must be submitted electronically via the OpenGov Procurement Portal and include a cost proposal with hourly rates for each personnel category. Key requirements include compliance with the City of Santa Fe Living Wage Ordinance and the submission of a Non-Collusion Affidavit. Local preference may be granted to businesses located within Santa Fe municipal limits that provide valid Resident Business certification.

POSTED

DEADLINE

Registered Apprenticeship Program (RAP) AdministratorThe Registered Apprenticeship Program Administrator subcontract involves providing administrative oversight and compliance reporting for prime contractors working on Connecticut Office of Early Childhood apprenticeship projects. The selected provider will be responsible for managing apprentice registrations through RAPIDS using codes 90625 and 0657CB, tracking 4,000 hours of competency-based work, and ensuring strict adherence to EEO and non-discrimination laws. This role requires specialized expertise in Connecticut Department of Labor regulations to deliver accurate compliance reports and certification records. The opportunity is managed by DAS Procurement for the state of Connecticut, with a response deadline of December 4, 2026.

POSTED

DEADLINE

Workplace Restorative and Remediation SpecialistThis subcontract opportunity is for a Workplace Restorative and Remediation Specialist to support prime contractors on Government of Ontario projects specifically for Ontario Health. The selected provider will be responsible for implementing remediation plans following workplace conflicts, facilitating restorative processes to resolve concerns, and stabilizing high-risk environments. Key deliverables include the creation of remediation plans, the execution of facilitated resolution sessions, and the submission of detailed workplace restoration reports. Qualified candidates must hold professional certification in either mediation or organizational development. The solicitation was posted on November 5, 2026, with a response deadline of December 7, 2026. The work is performed within Canada under NAICS code 541611, focusing on administrative management and organizational consulting services to improve workplace functionality.

POSTED

DEADLINE

Program Compliance and Court Monitoring ServicesThis subcontract for Torrance County, New Mexico, focuses on the delivery of program compliance and court monitoring services. The selected provider will support prime contractors by monitoring the court system to ensure strict adherence to domestic violence protocols and analyzing program data to verify compliance with both state and federal mandates. A critical requirement for this role is expert knowledge of New Mexico state laws specifically pertaining to domestic violence. The primary deliverables for this engagement include the production of formal compliance reports and detailed monitoring logs. Interested parties should note that the solicitation was posted on November 5, 2026, with a response deadline of December 10, 2026. The services fall under NAICS code 541611, emphasizing the administrative and management nature of the compliance oversight.

Torrance County

POSTED

about 16 hours ago

DEADLINE

in about 1 month

AI Contract Overview

The Security Compliance, Audit and Risk Management subcontract, issued by the Department of Defense agency W6QK Acc-Apg, focuses on maintaining critical cybersecurity standards and operational resilience. The selected provider will be responsible for conducting annual disaster recovery testing and generating the necessary remediation reports to address identified vulnerabilities. Additionally, the scope includes the production of SOC1 audit artifacts to ensure financial and operational control transparency. A primary objective of this engagement is to ensure strict adherence to Department of Defense cybersecurity policies, specifically managing the Risk Management Framework and Authority to Operate processes. Performance for this contract will take place in Fort Belvoir, Virginia. Interested parties must submit their responses by August 4, 2026, under NAICS code 541611.

General Info

DoD subcontract for cybersecurity compliance, disaster recovery, and SOC1 audits in Fort Belvoir.

Agency

Department Of Defense → W6QK Acc-Apg

NAICS

541611 - Administrative Management and General Management Consulting Services

Place of Performance

Fort Belvoir, VA, 22060, USA

Set-Aside

NONE

Documents

This scope was carved out of W15P7T-26-R-ICAM.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Request for Information (RFI) for Army Enterprise Identity, Credential, and Access Management (E-ICAM) Services Delivery Contract

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 14

subcontract

Response DeadlineAug 4

Deadline has passed

Submission Closed

08/04/2026, 01:00:00 PM EDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → W6QK Acc-Apg

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → W6QK Acc-Apg

Office AddressN/A

ContactsNo contact information available

Full Description

Conduct annual disaster recovery testing, generate remediation reports, produce SOC1 audit artifacts, and ensure compliance with DoD cybersecurity policies including RMF and ATO processes.