Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, July 22 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Security Risk Assessment and Management Software

Active

2026-044State & Local

Response Deadline08/28/2026, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

Johnson County in Kansas is seeking information on Security Risk Assessment and Management Software to evaluate potential solutions that meet enterprise-level needs, including integration with existing systems such as CRM platforms, call center tools, and other relevant applications. This request for information aims to assess market capabilities, vendor offerings, functional features, and pricing structures to inform future procurement decisions rather than initiate an immediate acquisition. The solicitation, identified as 2026-044, was posted on July 20, 2026, with responses due by August 28, 2026, and is open to all interested parties without a specific set-aside designation. Interested vendors should direct inquiries to Mark Zack, the primary point of contact, via email at mark.zack@jocogov.org or by phone at 913-715-0590, and can access additional details through the provided online portal.

General Info

Johnson County seeks security risk software solutions with integration capabilities, info due August 28, 2026.

Agency

Kansas → Johnson CountyView Agency

NAICS

518210 - Computing Infrastructure Providers, Data Processing, Web Hosting, and Related ServicesView NAICS

Place of Performance

KS, USA

Set-Aside

NONE

Documents

(2)

2026-044 Security Risk Assessment and Management Software RFI

PDF•rfi

RFI 2026-044 Security Risk Assessment and Management Software

DOCX•rfi

AI Contract Breakdown

Uniform Contract Format

Sign up to view the full breakdown with detailed analysis of each section.

Timeline

PhaseSources Sought

PostedJul 20

Sources Sought

Response DeadlineAug 28

Submission deadline

Response Deadline

08/28/2026, 08:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyKansas → Johnson County

Contacts1 person available

OfficeKS, USA

Organization / Agency

Kansas → Johnson County

View Agency Profile

Office AddressKS, USA

Contacts

Mark Zack

contact@example.gov

+1 (555) 000-0000

Full Description

Show more

The intent of this Request for Information is to solicit information about Customer Relationship Management Software to better serve Johnson County's needs and to gain a better understanding of the marketplace, vendors, solution functionality and pricing structures. The intended implementation of this software would be on an enterprise basis and may include integration of existing CRM software, call centers, and relevant software applications.

Similar Contracts

Same NAICS industry code

Property Management System RefreshThe Port of Seattle is preparing to procure a modern property management system to enhance its operational capabilities through a forecasted solicitation under NAICS code 518210, which pertains to data processing, hosting, and related services. The initiative, titled Property Management System Refresh, aims to replace or upgrade existing infrastructure to improve efficiency, scalability, and integration across property-related functions managed by the agency. Although the solicitation number is not yet issued and no set-aside details are provided, the effort is being led by ICT Enterprise Infrastructure Services, with Farlis Lewis serving as the primary point of contact and Tamara Flood as the project manager. Interested vendors should monitor the official portal for the formal request when it becomes available. The system must support comprehensive property administration tasks, potentially including leasing, maintenance tracking, financial reporting, and tenant management, all aligned with the Port’s operational standards and long-term digital transformation goals. Performance of the work is expected to occur within the Port of Seattle’s jurisdiction, with no specific geographic limitations indicated. Vendors are encouraged to engage with the listed points of contact for clarification and to prepare for the upcoming procurement process, which will select a qualified provider capable of delivering a secure, reliable, and interoperable solution tailored to the Port’s unique requirements.

ICT Enterprise Infrastructure Services

POSTED

about 7 hours ago

DEADLINE

Managed Network Services (MNS)The Texas Department of Information Resources is soliciting proposals for Managed Network Services through Solicitation Number DIR-CPO-STS-609, aiming to establish a vendor partnership under its Shared Technology Services program to support eligible state and local government customers. Interested parties must submit responses by the deadline of September 4, 2026, in strict accordance with the specified format outlined in the Request for Offer, ensuring compliance with all technical, operational, and administrative requirements. The contract is intended to deliver scalable, secure, and reliable network infrastructure and management services tailored to the needs of public sector entities across Texas. The solicitation is open to qualified Respondents who meet the outlined criteria, with no set-aside provisions specified, and is categorized under the SLED government sector. Point of contact for all inquiries is Cassandra Holmes, reachable via email at enterprise609@dir.texas.gov or phone at 512-475-4873. Proposals must address the full scope of Managed Network Services as defined by DIR, and all submissions will be evaluated based on the parameters detailed in the RFO. The contract will be administered through DIR’s enterprise procurement system, with additional information available via the provided Texas SmartBuy portal link.

Department of Information Resources

POSTED

about 14 hours ago

DEADLINE

in about 2 months

Third-Party Risk Management (TPRM) Software PlatformJohnson County is seeking a cloud-based SaaS platform to manage third-party vendor risk through comprehensive risk assessments, ongoing compliance monitoring, audit readiness tools, and integrated operational workflows. The solution must be fully hosted in the cloud, scalable, and capable of automating key risk management processes to support the agency’s vendor oversight requirements. The solicitation is structured as a subcontract opportunity with a response deadline of August 28, 2026, and falls under NAICS code 518210 for data processing and hosting services. While no set-aside provisions or specific geographic performance constraints are indicated, the platform is expected to meet the operational needs of Johnson County’s internal risk management functions without requiring on-premises deployment.

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Online Auction Platform & Digital ServicesThe contract involves the provision and management of a secure digital platform designed to support online auctions, encompassing full lifecycle services including listing management, real-time bidding interfaces, integrated payment processing, and robust cybersecurity measures to protect sensitive transactional data. The platform must ensure reliability, scalability, and compliance with industry standards for digital commerce, with a focus on user accessibility, data integrity, and resistance to cyber threats. All functions must operate seamlessly to enable authorized users to conduct auctions efficiently and securely. The solicitation is designated as a subcontract under NAICS code 518210, issued by the Town of Braintree in Massachusetts, with performance required at Kennedy Memorial Drive in Braintree, ZIP code 02184. The deadline for responses is August 10, 2026, and the contract reflects the town’s intent to modernize its auction operations through a trusted third-party digital solution. While no specific set-aside provisions are indicated, contractors must demonstrate technical capability, proven experience in secure platform development, and a clear methodology for maintaining compliance with evolving digital security requirements.

TOWN - Town of Braintree

POSTED

about 19 hours ago

DEADLINE

Electronic Invoicing and Payment Processing via WAWFThe contract pertains to the management of electronic invoicing through the Wide Area WorkFlow system using the Department of Defense Activity Address Code SL4701, ensuring full compliance with federal electronic funds transfer standards. It is a subcontract under the authority of the Defense Logistics Agency, operating within the Department of Defense, and is classified under the NAICS code 518210 for data processing services. The purpose is to facilitate accurate and secure digital invoice submission and payment processing in alignment with federal mandates, integrating directly with DLA’s payment infrastructure. All transactions must adhere to the prescribed WAWF protocols and EFT requirements to ensure timely reimbursement and regulatory compliance. The contract’s performance is tied to the electronic handling of financial documentation without manual intervention, emphasizing system integrity, data accuracy, and timely submissions. The contract award is linked to the specific identifier SPE60521D8515, and the point of performance is not explicitly defined, indicating that services may be delivered remotely or through centralized systems under federal control.

Defense Logistics Agency

POSTED

about 20 hours ago

DEADLINE

Cloud Security Compliance (FedRAMP Moderate Alignment)The contract entails ensuring cloud-based systems adhere to the FedRAMP Moderate baseline security controls through comprehensive configuration management, regular vulnerability scanning, and robust documentation support to enable continuous monitoring and achieve Authority to Operate. The work focuses on maintaining compliance throughout the system lifecycle by implementing standardized security practices, identifying and remediating potential weaknesses, and generating required evidence for audits and assessments. All activities must align with federal cybersecurity requirements and support the ongoing authorization process for cloud services used by government entities. This subcontract is issued under the North American Industry Classification System code 518210 and is associated with the Department of Defense through the Defense Logistics Agency. The solicitation was posted on July 20, 2026, and the performance location and point of contact details are not specified. The contract reference is linked to DIBBS with the award number SPE4A125GR007 and delivery order SPE4A126F0870, indicating it is part of a broader defense procurement effort to secure federal cloud infrastructure.

Defense Logistics Agency

POSTED

about 20 hours ago

DEADLINE

IT & Telecom System Monitoring and OperationsThe contract supports continuous monitoring, fault detection, and operational maintenance of IT and telecommunications infrastructure under the Defense Logistics Agency, part of the Department of Defense. It encompasses performance reporting and coordination with federal systems to ensure reliability, uptime, and compliance with operational standards. The work is classified under NAICS code 518210 and is structured as a subcontract, indicating it falls under a broader prime contract arrangement. The solicitation was posted on July 20, 2026, and while specific location details are not provided, performance is expected to align with DLA’s federal infrastructure requirements across designated operational domains.

Defense Logistics Agency

POSTED

about 20 hours ago

DEADLINE

Electronic Payment and Receiving Reporting (WAWF Integration)This contract mandates the exclusive use of the Wide Area Workflow system for submitting all payment requests and receiving reports, with no alternative electronic systems allowed. All subcontractors must fully integrate their internal accounting systems with WAWF to ensure seamless, automated data transfer and regulatory compliance. The requirement applies to every transaction under this subcontract, and failure to comply will result in payment delays or rejection. The contract is issued by the Defense Logistics Agency under the Department of Defense, classified under NAICS code 518210, and is specifically designated as a subcontract. All performance activities are subject to federal acquisition rules governing electronic reporting, and system integration must be operational prior to any invoice or receiving report submission.

Defense Logistics Agency

POSTED

about 20 hours ago

DEADLINE

Claims Reporting & Performance Analytics PlatformThe City of Hurst is seeking a subcontractor to develop and maintain a secure online portal designed for real-time claim tracking, secure documentation upload, and comprehensive performance reporting with interactive dashboards and standardized monthly reports. The system must ensure data integrity, user authentication, and compliance with security standards to facilitate efficient handling of claims and transparent performance metrics. The platform should support seamless user interaction and provide timely, accurate analytics to support decision-making. The opportunity is posted under NAICS code 518210 and is classified as a subcontract, with a response deadline of August 12, 2026. The solicitation does not specify a set-aside type or agency organization details beyond the City of Hurst in Texas. Interested parties must submit proposals through the provided public purchase portal before the deadline, and the place of performance and point of contact information are not specified in the posting.

POSTED

DEADLINE

Technical Data Management and Limited Rights Software Support

Argonne National Labor - DOE Contractor

POSTED

DEADLINE

Electronic Submittal and Media Preparation

Navfacsyscom Mid-Atlantic

POSTED

DEADLINE

U.S.-Based Data and IT Services with PII ProtectionThis contract pertains to IT services that involve the handling of Personally Identifiable Information and mandates strict compliance with U.S.-only data storage requirements to ensure all data remains within the United States. All data transmissions must be conducted using encrypted protocols to safeguard the integrity and confidentiality of sensitive information. Third-party disclosure of any data is strictly prohibited unless explicit authorization is obtained, reinforcing a zero-tolerance policy for unauthorized access or sharing. The services are scoped under NAICS code 518210, indicating a focus on data processing, hosting, and related IT activities. The contract is issued as a subcontract by ORNL UT-Battelle LLC, a Department of Energy contractor, and is specifically tied to performance at Oak Ridge, Tennessee, with a zip code of 37830. The opportunity was posted on July 20, 2026, and responses are due by July 24, 2026, creating a tight turnaround window for qualified vendors. While the contract does not specify a set-aside type or solicitation number, it emphasizes compliance with U.S. data sovereignty and security standards, making it critical that potential bidders demonstrate proven capabilities in secure, domestically hosted IT infrastructure and a rigorous track record of protecting PII within federal contracting environments.

Ornl Ut-Battelle Llc-Doe Contractor

POSTED

DEADLINE

More opportunities from Kansas → Johnson County

Same awarding agency

Cyber Risk Intelligence & External Monitoring IntegrationThe contract seeks to integrate external cyber risk intelligence feeds such as BitSight and SecurityScorecard into the existing Third-Party Risk Management platform to enable continuous, automated monitoring of vendor security posture. This integration will provide real-time visibility into the cybersecurity health of third parties, allowing for proactive risk identification, score tracking, and anomaly detection without manual intervention. The solution must be capable of ingesting, normalizing, and correlating data from multiple external sources to produce actionable insights and alert triggers tied to predefined risk thresholds within the TPRM framework. The solicitation is formatted as a subcontract under NAICS code 541618, indicating a focus on other computer-related services, with a response deadline of August 28, 2026. The contracting agency is Johnson County in Kansas, though specific office details and point of contact information are not provided. The project emphasizes operational continuity and enhanced risk mitigation through automated, data-driven vendor assessments, requiring the vendor to demonstrate technical capability in API integration, data enrichment, and seamless incorporation of external signals into existing governance workflows. Performance is expected to be delivered remotely without specified geographic constraints.

Other Management Consulting Services

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Risk Assessment Content Development & Methodology DesignThe contract seeks the development of standardized risk assessment questionnaires, scoring models, and evaluation criteria tailored to align with NIST frameworks, SIG Lite standards, and public sector compliance obligations. The work requires designing methodologies that are consistent, scalable, and capable of supporting consistent risk evaluation across organizational units, with an emphasis on practical implementation for government and contractor environments. The deliverables must ensure interoperability with existing regulatory and cybersecurity compliance structures while enabling clear, quantifiable risk outcomes. This is a subcontract under NAICS code 541611, with a response deadline of August 28, 2026, and a posting date of July 20, 2026. The agency involved is Johnson County in Kansas, though specific location details for performance or contact information are not provided. The solicitation does not specify a set-aside type or additional eligibility requirements beyond the subcontract classification. Interested parties must submit proposals by the stated deadline to meet the county’s objectives for standardized, compliant, and actionable risk assessment tools.

Administrative Management and General Management Consulting Services

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Ongoing TPRM Maintenance & Support ServicesJohnson County is seeking a subcontractor to provide ongoing maintenance and support services for its Third-Party Risk Management platform, focusing on post-implementation technical assistance, system updates, user training, issue resolution, and continuous enhancement. The contractor will be responsible for ensuring the platform remains operational, secure, and aligned with evolving institutional needs through proactive support and optimization efforts. Services must be delivered in a timely and efficient manner to maintain platform reliability and user adoption across the organization. The solicitation was posted on July 20, 2026, with responses due by August 28, 2026, under NAICS code 541519 for other information technology services. The work is expected to be performed locally, though no specific location details are provided in the data.

Other Computer Related Services

POSTED

about 17 hours ago

DEADLINE

in about 1 month

TPRM Implementation & Configuration ServicesJohnson County is seeking a subcontractor to implement, configure, and customize a Third-Party Risk Management platform to align with its internal risk workflows, user roles, assessment templates, and system integrations. The project requires deep customization to ensure the platform supports the county’s specific operational needs, including the design and deployment of tailored risk assessment processes, role-based access controls, and seamless connectivity with existing systems. The subcontractor must demonstrate expertise in deploying TPRM solutions in public sector environments and be prepared to work closely with county stakeholders to map current processes and deliver a fully functional, scalable platform. The solicitation is open for submissions until August 28, 2026, and is classified under NAICS code 541512 for Computer Systems Design Services. The contract type is a subcontract, and while the place of performance and point of contact details are not specified, work is expected to support Johnson County, Kansas. The implementation must ensure data integrity, regulatory compliance, and user adoption through structured training and documentation. Proposals should outline the vendor’s methodology, team qualifications, timelines, and experience with similar public sector implementations.

Computer Systems Design Services

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Accessibility and Compliance ConsultingJohnson County in Kansas is seeking a subcontractor to conduct an independent audit and comprehensive documentation of platform compliance with WCAG 2.1 AA and Section 508 accessibility standards. The scope includes evaluating digital content and functionality against established accessibility guidelines and preparing official conformance reports such as VPATs or their equivalent to demonstrate adherence. This engagement is critical for ensuring digital services meet federal and recognized international accessibility requirements, supporting inclusive user experiences for individuals with disabilities. The solicitation was posted on July 16, 2026, with responses due by August 14, 2026, and the NAICS code 541618 indicates this falls under other management consulting services, specifically aligning with accessibility and compliance consulting. All work is expected to be performed in support of Johnson County’s digital infrastructure, though no specific location is designated beyond the agency’s jurisdiction.

Other Management Consulting Services

POSTED

DEADLINE

Technical Support and Maintenance (Ongoing)Johnson County is seeking a subcontractor to provide ongoing technical maintenance and support for its communications platform, encompassing continuous help desk services, SLA-driven incident resolution, and full lifecycle management including system updates, proactive monitoring, and coordination with third-party vendors. The work requires adherence to defined service levels to ensure system reliability and timely response to operational issues, with performance expected to sustain uninterrupted platform functionality. The solicitation is open for submissions until August 14, 2026, with a NAICS code indicating information technology services, and the contract will be executed under a subcontract arrangement without specific set-aside provisions. All work is to be performed in support of Johnson County's operations in Kansas.

Other Computer Related Services

POSTED

DEADLINE

Staff Training and User Adoption SupportJohnson County is seeking a subcontractor to develop and deliver comprehensive training programs aimed at ensuring full user adoption of a new platform across its childcare locations. The scope includes creating detailed user guides, conducting live training sessions tailored to JCPRD staff, and providing ongoing support to address questions and facilitate smooth integration. The training must be designed to accommodate multiple sites and varying levels of technical proficiency, ensuring consistent understanding and effective utilization of the platform. The solicitation is open for responses until August 14, 2026, and falls under NAICS code 611430, which pertains to other schools and instruction. All work is expected to be performed in support of Johnson County’s operational needs in Kansas, with no specific location details provided beyond the agency’s jurisdiction.

Professional and Management Development Training

POSTED

DEADLINE

Software Implementation and System IntegrationThe contract entails the full implementation of a childcare communications platform designed to streamline operations across multiple sites managed by Johnson County in Kansas. The project includes comprehensive system configuration tailored to the agency’s needs, migration of data for approximately 6,000 active enrollments, and seamless integration with existing Johnson County Public Resources Department systems to ensure continuity and efficiency. A critical requirement is the implementation of secure data segregation to maintain privacy and compliance, ensuring that information for each site remains isolated and accessible only to authorized personnel. The work must be completed under the NAICS code 541512, indicating it falls under custom computer programming services, and will be executed as a subcontract under the broader procurement framework of the agency. The solicitation was posted on July 16, 2026, with proposals due by August 14, 2026, and performance is expected to occur within Johnson County’s operational jurisdiction.

Computer Systems Design Services

POSTED

DEADLINE

Childcare Communications PlatformJohnson County Park & Recreation District is soliciting proposals for a comprehensive childcare communications platform designed to streamline operational workflows and enhance family engagement across its programs. The selected vendor must deliver a market-ready and production-ready solution that includes full project implementation, system configuration, staff training, contact database setup, onboarding support, and ongoing technical maintenance. The platform must align with JCPRD’s specific communication needs, ensuring seamless interaction between staff and families while meeting all performance criteria outlined in the final contract. Proposals are due by August 14, 2026, and must be submitted under solicitation number PRK-2026-004, with no cost documentation included at this stage. Form 6, the proposed cost detail, will only be requested from finalists and is due during the interview phase. All submissions should be directed through the official portal, and inquiries may be addressed to Natalia Fairchild at natalia.fairchild@jocogov.org.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Project Management and Technical OversightThe contract titled Project Management and Technical Oversight requires the selected subcontractor to manage the end-to-end implementation of a Content Management System for Johnson County, ensuring alignment with the county’s technology standards and objectives. The subcontractor will coordinate directly with multiple subcontractors, monitor and report on project milestones, and act as the primary liaison between the vendor and Johnson County’s internal technology team to facilitate clear communication and timely resolution of technical or operational issues. The role demands strong project management skills, technical proficiency in CMS platforms, and the ability to navigate complex stakeholder environments. This subcontract is tied to NAICS code 541611, indicating it involves management consulting services, specifically focused on technical oversight and implementation support. The solicitation was posted on July 13, 2026, with responses due by August 24, 2026, and is issued by Johnson County under the state of Kansas. While specific performance location details are not provided, the work is expected to support county operations and technology infrastructure. The contract does not indicate any set-aside provisions and is open to eligible subcontractors seeking to contribute to a large-scale digital systems initiative.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month

Cybersecurity and Risk Compliance SupportThe contract titled Cybersecurity and Risk Compliance Support seeks a subcontractor to provide comprehensive cybersecurity documentation services aimed at achieving and maintaining SOC 2 and HIPAA compliance. The scope includes supporting the development and maintenance of policies, procedures, and controls necessary for audit readiness and regulatory adherence, as well as assisting with third-party risk assessments to evaluate vendors and partners for data security posture. The subcontractor will also be responsible for helping to design and implement data handling plans that align with industry standards and legal requirements, ensuring secure and compliant management of sensitive information throughout its lifecycle. This effort is critical to safeguarding patient and operational data under the jurisdiction of Johnson County in Kansas. The solicitation was posted on July 13, 2026, with a response deadline of August 24, 2026, and is classified as a subcontract under NAICS code 541611, which pertains to management consulting services including cybersecurity and risk advisory. While no specific place of performance or point of contact is indicated, work is expected to support Johnson County’s broader objectives for data security and regulatory compliance. Interested parties must submit proposals through the provided online portal by the stated deadline to be considered for award. The contract does not specify a type of set-aside, indicating it is open to all qualified subcontractors regardless of size or ownership classification.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month