Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Security Testing & Compliance

Active

State & Local

Response Deadline09/11/2026, 07:30:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Security Testing and Compliance subcontract is issued by the Kentucky Personnel-Office of Secretary to ensure adherence to Commonwealth policies and HIPAA regulations. The scope of work involves performing comprehensive security assessments, specifically focusing on vulnerability scanning, penetration testing, and detailed configuration reviews. This opportunity is categorized under NAICS code 541690 and was posted on August 26, 2026. Interested parties must submit their responses by the deadline of September 11, 2026. Further details and submission processes are available through the Kentucky vendor self-service portal.

General Info

Kentucky Personnel-Office security testing subcontract for HIPAA compliance, due September 11, 2026.

Agency

Kentucky → Personnel-Office of SecretaryView Agency

NAICS

541690 - Other Scientific and Technical Consulting ServicesView NAICS

Place of Performance

Other, KY, USA

Set-Aside

NONE

Documents

This scope was carved out of RFP-758-2700000012-4.

The full solicitation package (22 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFP-758-2700000012-4 | HCM ERP System Replacement - Phase 1

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 26

subcontract

Response DeadlineSep 11

Submission deadline

Response Deadline

09/11/2026, 07:30:00 PM UTCin 7 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyKentucky → Personnel-Office of Secretary

ContactsNo contacts available

OfficeN/A

Organization / Agency

Kentucky → Personnel-Office of Secretary

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Conduct security testing including vulnerability scanning, penetration testing, and configuration review to ensure compliance with Commonwealth policies and HIPAA.

Similar Contracts

Same NAICS industry code

RFQ6082 Noise Compliance & Air Quality Testing Services

Solicitation # RFQ6082

Management & Training Corporation is seeking bids for a subcontracting opportunity to provide industrial hygienist services, specifically noise compliance and air quality testing, for the San Diego Job Corps Center in Imperial Beach, California. This solicitation, identified as RFQ6082 under NAICS code 541690, is open to various small business set-asides, including SDB, WOSB, HUBZone, VOSB, and SDVOSB. Interested bidders must submit a bid sheet, supplier packet, and proof of insurance by September 16, 2026, at 3:00 PM PST. A pre-bid meeting is scheduled for September 9, 2026. The contract requires strict adherence to the Service Contract Act and the prevailing wage rates specified in Wage Determination 2015-5635 Revision 29 for San Diego County. Compliance with numerous Federal Acquisition Regulation clauses is mandatory, including those regarding the Buy American Act, combating trafficking in persons, and basic safeguarding of covered contractor information systems. Subcontractors must provide a self-certification form and certify their debarment status. MTC and the government maintain the right to inspect work and premises, and final payment is contingent upon the delivery and acceptance of services that meet all specified quality and workmanship standards.

San Diego Job Corps Center

POSTED

about 11 hours ago

DEADLINE

Biostatistical Analysis and Data InterpretationThis subcontract for Biostatistical Analysis and Data Interpretation supports prime contractors on Department of Veterans Affairs projects within the Network Contract Office 01. The selected provider will perform analysis of raw data from pre-clinical research, utilizing software such as SPSS, SAS, R, or Prism to conduct data interpretation and statistical validation of research findings. All work must adhere to strict scientific peer-review standards and data integrity protocols to ensure the delivery of accurate analysis reports. The project is categorized under NAICS code 541690 and is based in White River Junction, Vermont. Interested parties must respond by September 9, 2026, following the posting date of September 4, 2026.

241-NETWORK Contract Office 01 (36C241)

POSTED

about 15 hours ago

DEADLINE

Lock Out – Tag Out (LOTO) Services at Chillicothe VAMC - Chillicothe, OH

Solicitation # 36C25026Q0604

The Department of Veterans Affairs is seeking quotes for performance-based Lock Out Tag Out (LOTO) services at the Chillicothe VAMC in Ohio under solicitation 36C25026Q0604. The selected contractor will be responsible for providing all labor, materials, and supervision necessary to develop, implement, and annually review graphical LOTO procedures for identified equipment to ensure compliance with ANSI and OSHA safety requirements. This opportunity is set aside for Service-Disabled Veteran-Owned Small Businesses (SDVOSB) under NAICS code 541690. This is a combined synopsis and solicitation, meaning no separate written solicitation document will be issued. Interested parties must submit their quotes by the deadline of September 10, 2026.

250-NETWORK Contract Office 10 (36C250)

POSTED

about 15 hours ago

DEADLINE

(Sole Source) NicheVision Scientific Support MBFB

Solicitation # SRC0000036004

The Alabama Department of Forensic Science is seeking a sole source contract for STRmix annual upgrade and maintenance services for the period spanning October 1, 2026, through September 30, 2027. This agreement covers all new point and major version releases along with expert scientific support for general queries, troubleshooting, and case-specific advice. However, the scope of support specifically excludes platform upgrades, version upgrades, and validation services. Under solicitation number SRC0000036004, the agency requires bid pricing for these services and notes that the final award will be subject to available budget constraints. The response deadline for this solicitation is September 10, 2026, with Carla Williams serving as the primary point of contact for the Mobile Alabama office.

POSTED

DEADLINE

Environmental & Ecological Consulting

City of San Diego

POSTED

DEADLINE

Respiratory Product Technical ExpertThis subcontract opportunity is for a Respiratory Product Technical Expert to provide specialized consulting services for prime contractors supporting the Navajo Area Indian Health Service at the Chinle Comprehensive Health Facility. The selected provider will offer technical guidance to clinical staff and respiratory therapists, focusing specifically on the application, specifications, and compatibility of respiratory products, with an emphasis on HVT 2.0 systems. Qualified candidates must possess professional certification as a Registered Respiratory Therapist or hold manufacturer-certified expertise. This opportunity is set aside for Indian Small Business Economic Enterprises under NAICS code 541690. The response deadline for this requirement is September 9, 2026.

Navajo Area Indian Health Svc

POSTED

DEADLINE

Imagery Analysis and Interpretation

Naval Research Laboratory

POSTED

DEADLINE

Cloud Governance and Compliance Auditing

POSTED

DEADLINE

Apparel Data Processing and NormalizationThe Apparel Data Processing and Normalization subcontract is a small business set-aside opportunity with the Department of Labor, specifically the Cas Division 5 Procurement. The project focuses on providing cleaned, normalized, and standardized datasets for prime contractors supporting Bureau of Labor Statistics projects. The primary objective is to transform raw HTML and JSON scrapes into research-ready datasets for CPI research by mapping disparate product categories to a single standard and developing a comprehensive data dictionary. Technical execution requires the use of Python, Pandas, SQL, and various ETL tools to ensure high levels of data accuracy. The contract is categorized under NAICS code 541690 and was posted on September 3, 2026, with a response deadline of September 11, 2026. Final deliverables include the processed datasets and a detailed data dictionary to support federal research efforts.

DOL - Cas Division 5 Procurement

POSTED

DEADLINE

Heavy Metals Surface Sampling – Temporary Corrosion Control Structure

Solicitation # FA524026Q0045

This contract, solicitation number FA524026Q0045, seeks a service provider to collect and analyze surface samples for heavy metals at the Temporary Corrosion Control Structure on Andersen AFB, Guam, in support of the 36 MXG. The scope of work specifically requires testing for Hexavalent Chromium and the eight RCRA metals, including Arsenic, Barium, Cadmium, Chromium, Lead, Mercury, Selenium, and Silver. To ensure quality and compliance, all laboratory analyses must be conducted by a facility accredited by the American Industrial Hygiene Association Laboratory Accreditation Programs or an equivalent recognized national body. The opportunity is designated as a Total Small Business Set Aside under NAICS code 541690. It is managed by the Department of Defense through the FA5240 36 Cons Lgc office. Interested parties must submit their responses by the deadline of September 10, 2026. Primary coordination for this requirement is handled by Micha Hough and Louella Navarrete.

FA5240 36 Cons Lgc

POSTED

DEADLINE

Research and Advisory Services

Solicitation # W519TC26GARCY

The Department of Defense, through the W6QK Acc-Ri office located in Rock Island, Illinois, is seeking sources for a contract regarding Research and Advisory Services. This opportunity is categorized as a sources-sought notice under solicitation number W519TC26GARCY, with the primary place of performance designated as Fort Gordon, Georgia. Interested parties must submit their responses by the deadline of September 8, 2026, at 2:00 PM. Primary coordination for this requirement is managed by Lynnette R Teel, with Casie Layer serving as the secondary point of contact.

POSTED

DEADLINE

Fall Protection Inspection

Solicitation # W50S7T26QA012

The 182d Airlift Wing in Peoria, Illinois, is conducting market research under FAR Part 10 to identify qualified sources for fall protection system services. This request for information is not a formal solicitation but seeks budgetary pricing and capabilities for a potential contract consisting of a base year and four option years. The scope of work includes annual physical inspections, recertifications, and cable pull testing for equipment located in buildings B734 and B632, which includes FlexRail and KeeLine cable systems, single point anchors, and self-retracting lifelines. Additionally, the requirement includes a five-year engineering design review involving professional engineer stamped drawings and recertification reports. Interested respondents must have an active registration in SAM.gov with a valid Unique Entity Identifier and CAGE code. Submissions should include company information, socioeconomic status, and a rough order of magnitude cost estimate for annual inspections and the five-year engineering review. This opportunity is designated as a total small business set-aside under NAICS code 541690. All responses, including the completed sources sought information form and capability statements, must be submitted to 1st Lt Nicholas Marzinzik by September 11, 2026, at 12:00 PM CDT.

W7M6 Uspfo Activity Ilang 182

POSTED

DEADLINE

More opportunities from Kentucky → Personnel-Office of Secretary

Same awarding agency

Healthcare Data Analytics ProviderThis subcontract for a Healthcare Data Analytics Provider supports prime contractors on Kentucky Employees Health Plan projects by providing data pipelines and analytical tools. The scope includes developing data ingestion processes for pharmacy claims and implementing automated flags to detect pricing and billing anomalies, with a strict delivery requirement of a five day window. The provider must utilize automated claims scrubbing software and HIPAA compliant cloud environments to deliver a functional data monitoring dashboard. The project is based in Frankfort, Kentucky, and requires the provider to maintain HIPAA compliance and a valid Kentucky state business registration. The opportunity was posted on September 4, 2026, with a response deadline of September 11, 2026. It falls under NAICS code 541512 and is managed by the Personnel Office of Secretary for the state of Kentucky.

Computer Systems Design Services

POSTED

about 23 hours ago

DEADLINE

Pharmacy Benefit Claims Auditor / Recovery SpecialistThe Pharmacy Benefit Claims Auditor / Recovery Specialist subcontract involves performing detailed analysis of pharmacy benefit claims for prime contractors on Kentucky Employees Health Plan projects. The selected provider will utilize PBM data analytics tools to identify inaccurate billing, fees, pricing, and member cost shares in near real time, ensuring all billing aligns with contractual terms and plan designs. The role requires specialized knowledge of pharmacy billing standards and strict compliance with the Kentucky Civil Rights Act and KRS tax laws to deliver comprehensive audit reports and recovered savings. This opportunity is managed by the Kentucky Personnel Office of Secretary and is based in Frankfort. The solicitation was posted on September 4, 2026, with a response deadline of September 11, 2026. The contract falls under NAICS code 541219 and is structured as a subcontract.

Other Accounting Services

POSTED

about 23 hours ago

DEADLINE

RFP-790-2700000038-2 | Pharmacy Benefit Claims Monitoring

Solicitation # RFP 790 2700000038

The Commonwealth of Kentucky Personnel Cabinet and Department of Employee Insurance are seeking qualified vendors through RFP-790-2700000038 to provide Pharmacy Benefit Claims Monitoring services for the Kentucky Employees Health Plan. This initiative aims to ensure accurate billing and payment of pharmacy claims for approximately 150,000 insured employees and retirees in accordance with plan designs and contractual terms. The selection process includes a detailed questionnaire to evaluate vendor experience, staffing credentials, and organizational structure, while the cost proposal requires vendors to specify their fees as a percentage of the savings achieved. To maintain strict compliance with HIPAA regulations, the contract requires a Business Associate Agreement to govern the handling and protection of Protected Health Information for all plan members. The solicitation is managed by the Personnel Office of Secretary in Frankfort, Kentucky, with a response deadline of September 11, 2026. Primary contact for this effort is Alexa Perry.

Pharmacy Benefit Management and Other Third Party Administration of Insurance and Pension Funds

POSTED

about 23 hours ago

DEADLINE

End-User & System Administration TrainingThis subcontract opportunity with the Kentucky Personnel-Office of Secretary focuses on the development and delivery of comprehensive training programs for system administrators, employees, and HR staff. The scope of work includes the creation of instructional materials, the facilitation of live training sessions, and the production of e-learning modules. The solicitation is categorized under NAICS code 611430 and was posted on August 26, 2026. Interested parties must submit their responses by the deadline of September 11, 2026, at 7:30 PM. Further details and application processes are available through the Kentucky vendor services portal.

Professional and Management Development Training

POSTED

DEADLINE

Data Migration & ConversionThis subcontract opportunity, titled Data Migration and Conversion, is issued by the Kentucky Personnel-Office of Secretary. The project focuses on the planning and execution of migrating historical employee and benefits data from legacy systems into a new HCM ERP. Key technical requirements include data cleansing, transformation, and validation to ensure the integrity of the transferred information. The solicitation was posted on August 26, 2026, with a response deadline of September 11, 2026. This effort falls under NAICS code 518210 and is managed through the Kentucky vendor services portal.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Benefits Administration Software Configuration & IntegrationThis subcontract opportunity, titled Benefits Administration Software Configuration and Integration, is issued by the Kentucky Personnel-Office of Secretary. The project focuses on the configuration of benefits administration modules and their seamless integration with current HR, payroll, and financial systems. Key technical requirements include the establishment of benefit plans, rules, eligibility criteria, and billing logic. The solicitation is categorized under NAICS code 541512. Interested parties must submit their responses by the deadline of September 11, 2026, at 7:30 PM. Further details and application procedures are available through the Kentucky Vendor Self Service portal.

Computer Systems Design Services

POSTED

DEADLINE

HCM ERP Implementation Project ManagementThe HCM ERP Implementation Project Management subcontract, issued by the Kentucky Personnel-Office of Secretary, seeks dedicated project management services to oversee the implementation of a Human Capital Management Enterprise Resource Planning system. The selected provider will be responsible for critical project functions including planning, scheduling, risk management, and stakeholder coordination, utilizing industry-standard methodologies such as PMBOK or ITIL. This opportunity falls under NAICS code 541611 and was posted on August 26, 2026. Interested parties must submit their responses by the deadline of September 11, 2026, at 7:30 PM. Further details and application processes are available through the Kentucky state vendor portal.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

RFP-758-2700000012-4 | HCM ERP System Replacement - Phase 1

Solicitation # RFP-758-2700000012-4

The Commonwealth of Kentucky is soliciting proposals under RFP 758 2700000012 for Phase 1 of the Kentucky Enterprise Human Capital Management (HCM) ERP System Replacement. The primary objective is to replace an aging SAP-based system, which loses mainstream support by December 31, 2027, with a modern commercial off-the-shelf Benefits Administration and Billing software solution. This system will manage benefits administration, premium billing, payment collection, processing, and reconciliation for the Kentucky Employees Health Plan, serving approximately 192,000 members. The project requires a comprehensive implementation including project management, organizational change management, design, configuration, testing, and post-implementation support. Qualified vendors must submit a technical proposal and a separate cost proposal using a firm fixed pricing model. Key compliance requirements include a mandatory requirements checklist covering FedRAMP hosting, AI policy compliance, and cooperation with Independent Verification and Validation activities. Additionally, vendors must adhere to a Business Associate Agreement to ensure the secure handling of Protected Health Information under HIPAA regulations. Proposals must be submitted electronically by the deadline, and bidders must provide a notarized annual affidavit confirming compliance with Kentucky state laws and tax requirements.

Computer Systems Design Services

POSTED

DEADLINE

Independent Testing & Quality Assurance

Custom Computer Programming Services

POSTED

DEADLINE

Software Licensing & Subscription Management

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Training & Change Management Services

Professional and Management Development Training

POSTED

DEADLINE

Disaster Recovery & Business Continuity Planning

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE