Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Software Bill of Materials (SBOM) Generation and Maintenance

Active

State & Local

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This contract involves generating and maintaining Software Bills of Materials (SBOMs) for all software components used, ensuring comprehensive documentation that includes dependencies, licenses, and known vulnerabilities. The SBOMs must be created in either SPDX or CycloneDX format and kept current by updating them with each major software release. The contract is a subcontract under NAICS code 541519, which relates to other computer-related services. The client's agency is the Illinois Department of the Lottery, with the work to be performed in Springfield, Illinois, ZIP code 62702. Although specific details such as solicitation number, points of contact, or set-aside status are not provided, the focus is on compliance and thorough tracking of software components to enhance security and transparency throughout the software lifecycle. This requirement aligns with increasing industry standards aimed at vulnerability management and license compliance in software supply chains.

General Info

Generate and maintain updated SBOMs in SPDX or CycloneDX formats for Illinois Lottery software.

Agency

Illinois → Department of the Lottery

NAICS

541519 - Other Computer Related Services

Place of Performance

Springfield, IL, 62702, USA

Set-Aside

NONE

Documents

This scope was carved out of 26-458LOT-LOTTE-B-50045.

The full solicitation package (11 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

26-458LOT-LOTTE-B-50045 | Lottery- Digital Draw System Request for Proposal

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedFeb 9

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyIllinois → Department of the Lottery

ContactsNo contacts available

OfficeN/A

Organization / AgencyIllinois → Department of the Lottery

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Generate and maintain SBOMs in SPDX or CycloneDX format for all software components, including dependencies, licenses, and known vulnerabilities, updated with each major release.

Similar Contracts

Same NAICS industry code

Rapid7 Incident Command Advanced Subscription ProviderThis subcontract opportunity is for the provision of 24-month software subscriptions for Rapid7 Incident Command Advanced licenses to support prime contractors on projects within Chatham County, Georgia. The selected provider must be an authorized reseller or partner of Rapid7 Inc. and is responsible for delivering active software subscriptions and license keys to ensure continuous accessibility for the agency. The contract is categorized under NAICS code 541519 and requires delivery F.O.B. to Savannah, Georgia. Interested parties must respond by October 15, 2026, to be considered for this engagement with Chatham County.

POSTED

DEADLINE

ICT Service Desk & End-User SupportThis subcontract for ICT Service Desk and End-User Support involves providing comprehensive remote and on-site technical assistance for prime contractors working on Nexus Multi-Academy Trust projects. The scope of work focuses on delivering essential ICT support and service desk provisions, including troubleshooting, software application assistance, and the maintenance of end-user devices for both students and educational staff. The service provider is responsible for managing and resolving incident tickets through dedicated service desk ticketing systems and remote support tools. This opportunity is categorized under NAICS code 541519, with a response deadline set for October 30, 2026.

Nexus Multi-Academy Trust

POSTED

DEADLINE

Hardware Installation & Deployment ServicesThe Hardware Installation and Deployment Services subcontract involves providing comprehensive ICT hardware support for prime contractors working on Nexus Multi-Academy Trust projects. The scope of work includes the installation, configuration, imaging, and deployment of hardware systems, alongside essential asset management tasks such as asset tagging and technology refresh services. This opportunity is categorized under NAICS code 541519 and was posted on October 2, 2026. Interested parties must submit their responses by the deadline of October 30, 2026, at 12:00 PM.

Nexus Multi-Academy Trust

POSTED

DEADLINE

Threat Intelligence Integration and Feed ManagementThis subcontract, titled Threat Intelligence Integration and Feed Management, is issued by the Merthyr Tydfil County Borough Council to support prime contractors on Welsh Government CymruSOC 2.0 projects. The primary objective is the integration of diverse external threat intelligence feeds into a hybrid SIEM. This process will be executed using Threat Intelligence Platforms and API integrations, ensuring that all activities remain in strict compliance with national security information-sharing standards. The scope of work focuses on delivering fully integrated and operational threat intelligence feeds to enhance security monitoring capabilities. Classified under NAICS code 541519, the contract emphasizes the technical implementation of intelligence sources to strengthen the overall security posture of the CymruSOC 2.0 initiative.

Merthyr Tydfil County Borough Council

POSTED

DEADLINE

Cloud Infrastructure and DevSecOps ManagementThe Cloud Infrastructure and DevSecOps Management subcontract supports prime contractors on projects for the Texas Higher Education Coordinating Board. The scope of work involves the setup, management, and security of cloud environments across AWS, Azure, and GCP, with a primary focus on release pipeline automation and the management of DevOps processes. Key deliverables include the implementation of automated deployment pipelines and the provision of security remediation reports. The selected provider must oversee cybersecurity monitoring and ensure all operations strictly adhere to the Information Security Standards outlined in the contract. This engagement is categorized under NAICS code 541519.

Texas Higher Education Coordinating Board

POSTED

DEADLINE

Inventory Tracking & Asset Management (RFID/Barcoding)This subcontract focuses on the supply and management of inventory tracking and asset management systems for government-owned linens supporting prime contractors on Defense Commissary Agency projects. The scope of work involves implementing barcoding or RFID technology to track items individually or in batches, ensuring a digital chain-of-custody is maintained through the use of RFID tags, handheld scanners, and specialized inventory management software. All operations must strictly adhere to government data security standards to ensure the integrity of the tracking process. The project will be performed in Fort Lee, Virginia, and requires the delivery of a fully active tracking system along with detailed inventory reports. This opportunity falls under NAICS code 541519 and is managed under the Department of Defense for the Defense Commissary Agency. Interested parties should note the tight turnaround between the posting date of October 2, 2026, and the response deadline of October 6, 2026.

Defense Commissary Agency

POSTED

DEADLINE

EndoSoft PACS Software Support and MaintenanceThis subcontract opportunity with the Department of Veterans Affairs involves providing comprehensive support and maintenance for the EndoSoft Endoscopy PACS information system. The scope of work includes performing preventive and corrective maintenance, delivering remote software services, and providing technical support for prime contractors on VA medical center projects. Key responsibilities entail installing and configuring software components, executing system upgrades, and conducting remote troubleshooting to ensure a fully operational PACS system with detailed service reports. The project is located in White River Junction and falls under NAICS code 541519. To be eligible, contractors must provide an OEM authorization letter and ensure all deliverables meet Section 508 compliance standards. Interested parties should note the response deadline of October 12, 2026.

241-NETWORK Contract Office 01 (36C241)

POSTED

DEADLINE

Cybersecurity Compliance and Basic Safeguarding ServicesThis subcontract, titled Cybersecurity Compliance and Basic Safeguarding Services, is issued by the Department of Defense via W072 Endist Louisville. The contractor is responsible for providing cybersecurity monitoring, system scanning, and data protection services for prime contractors involved in GSA lease projects. Key technical requirements include updating malicious code protection, conducting periodic system scans, and sanitizing media that contains Federal Contract Information to ensure a secure information system environment. The scope of work emphasizes strict adherence to FAR 52.204-21 and Executive Order 13556 by limiting both physical and digital access to organizational information systems. The contractor must provide documented evidence of compliance to verify that all safeguarding standards are met. This opportunity falls under NAICS code 541519, with the place of performance located in Wynne, Arkansas.

W072 Endist Louisville

POSTED

DEADLINE

FedRAMP Webex Subscription Maintenance

Solicitation # CORHQ-26-Q-0369

Solicitation CORHQ-26-Q-0369 is a firm-fixed-price request for quotes issued by the Federal Deposit Insurance Corporation for the renewal of FedRAMP Webex subscription maintenance. The procurement covers a base period from January 1, 2027, to December 31, 2027, with two optional one-year extensions through December 31, 2029. Required deliverables include FedRAMP Extras 3000, Meetings Bridge Count Config, AU Meetings, AU Mgr Bridge Count Config, and Extended Security Pack AU Add-ons. The FDIC will utilize the Lowest Price Technically Acceptable evaluation method to select a responsive offeror. To be considered technically acceptable, offerors must be the Original Equipment Manufacturer or an authorized Cisco reseller and provide a formal Letter of Authorization. Submissions must include a completed Price Schedule, Section K representations and certifications, and applicable manufacturer software license, maintenance, and support agreements. Following Amendment 0002, the deadline for quote submissions is October 9, 2026, at 12:00 PM EST. All non-tangible deliverables, such as activation codes and product keys, must be submitted electronically to the designated FDIC software management and oversight personnel.

POSTED

DEADLINE

R499--Small Business Event | 2026 National Veterans Small Business Engagement | Cleveland Ohio Dec 8-9 | Amendment 9

Solicitation # 36U10126Q0023

Solicitation 36U10126Q0023 is a pre-solicitation notice issued by the Department of Veterans Affairs, Office of Small and Disadvantaged Business Utilization, for the 2026 National Veterans Small Business Engagement event. Scheduled for December 8-9, 2026, at the Huntington Convention Center in Cleveland, Ohio, the event serves as a networking platform for Veteran-owned and small businesses to connect with government and industry program managers and procurement decision makers. The event hours are 8:00 AM to 5:00 PM EST on December 8 and 8:00 AM to 3:00 PM EST on December 9. This notice is provided for information and planning purposes only and does not constitute a formal solicitation for award, meaning there are no specified contract values or evaluation factors. A series of amendments, including Amendment 9, have been issued primarily to add various industry NAICS codes, such as 541519, to overcome functional limitations within SAM.gov and maximize the announcement's reach to specific communities of interest. The response deadline is December 8, 2026, at 11:59 PM Eastern Time. The primary point of contact for the event is the Direct Access Program (DAP) at DirectAccess@va.gov.

Office Of Small & Disadvantaged Business Utilization (osdbu) (36U101)

POSTED

DEADLINE

Rubrik Enterprise Edition Software RenewalThis subcontract opportunity is for the renewal of Rubrik Enterprise Edition software licenses and premium support to support data management projects for Cherokee Nation Entertainment. The scope of work focuses on providing essential tools for data orchestration, backup, recovery, and archival operations, with a specific emphasis on maintaining immutable air-gapped backups and ensuring rapid cyber recovery capabilities. Eligible bidders must hold authorized Rubrik partner or reseller status to qualify for the award. The successful contractor will deliver active software licenses along with a 12-month premium support agreement. The solicitation was posted on October 2, 2026, with a response deadline of October 8, 2026.

Cherokee Nation Entertainment

POSTED

DEADLINE

Cybersecurity services

Solicitation # 9F032-20250160

The Canadian Space Agency is seeking bids from qualified Canadian suppliers to provide specialized cybersecurity professional services for a period of three years. The scope of work focuses on supporting security assessment and authorization activities, as well as Information Technology threat and risk assessments. This procurement is issued under the Task Based Informatics Professional Services supply arrangement and requires a minimum of two Level 2 Information Technology security threat and risk assessment and certification and accreditation analysts. Bidders may also propose one additional resource, which can be either a Level 3 analyst in the same category or a Level 2 or Level 3 Information Technology security vulnerability analysis specialist. This solicitation is restricted to Canadian suppliers under the Policy on the Prioritization of Canadian Suppliers in Federal Strategic Procurement and is governed by the Canadian Free Trade Agreement. Performance will take place in the Montreal Metropolitan Area, specifically in Longueuil. Security requirements include a minimum corporate clearance of Protected B and a minimum resource clearance of Reliability, though supply arrangement holders are not required to possess these clearances at the time of bid submission. The solicitation process has been updated via two amendments to extend the bid submission deadline and provide responses to industry questions.

Canadian Space Agency

POSTED

DEADLINE

More opportunities from Illinois → Department of the Lottery

Same awarding agency

Compliance Monitoring and Telemetry ReportingThis contract involves the ongoing collection and reporting of system telemetry data to ensure compliance with feature usage limits and adherence to contractual obligations. The work is categorized under NAICS code 541611, which typically encompasses administrative management and general management consulting services. The contract is a subcontract issued by the Department of the Lottery, Illinois, with the place of performance located in Springfield, Illinois, zip code 62702. The purpose of the contract is to provide continuous monitoring and data reporting services that verify system usage aligns with agreed terms and limitations, supporting oversight and compliance efforts. The contract does not specify any set-aside types or specific organizational requirements, and no solicitation number is provided. The contract posting date is April 15, 2026, and additional details can be accessed through the Illinois BidBuy website.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Technical Training and Knowledge TransferThis contract involves the development and delivery of specialized training materials and sessions aimed at educating Illinois Lottery staff on the use and administration of the CMTS test environment. The objective is to ensure that staff members are well-equipped with the technical knowledge and practical skills necessary to effectively operate and manage the system in their daily responsibilities. The contract falls under the NAICS code 611430, which pertains to professional and management development training. It is structured as a subcontract and is managed by the Illinois Department of the Lottery. The training activities will be conducted primarily in Springfield, Illinois, with the focus on providing comprehensive technical training and knowledge transfer to enhance staff capabilities. The solicitation was posted on April 15, 2026, indicating the timeline for procurement and engagement.

Professional and Management Development Training

POSTED

DEADLINE

Data Migration and System Integration SupportThe contract entails the execution of data migration from legacy systems to a new CMTS environment, which includes ensuring thorough data validation, transformation, and integration with existing tools to maintain system functionality and data integrity. It is a subcontract opportunity posted on April 15, 2026, by the Illinois Department of the Lottery, focused on support services under NAICS code 541513, which pertains to computer systems design services. The work will be performed in Springfield, Illinois, with the primary goal of smoothly transitioning data while minimizing disruption to ongoing operations. This involves expert handling of the data migration process and seamless integration within the new system framework to support the agency’s technological upgrade efforts. The contract reflects a critical step in modernizing the agency’s IT infrastructure through specialized subcontracted support.

Computer Facilities Management Services

POSTED

DEADLINE

SaaS Test Environment Hosting and ManagementThe contract involves providing a SaaS-based test environment tailored for CMTS, encompassing the provisioning, ongoing management, and comprehensive operational support. Key responsibilities include continuous monitoring to ensure system reliability, implementing access controls to maintain security, and delivering regular performance reports to track usage and efficiency. This arrangement is designed to support testing needs through a cloud-hosted platform that offers flexibility and scalability. Issued by the Illinois Department of the Lottery, this subcontract is identified under the NAICS code 518210, indicating a focus on data processing, hosting, and related services. The place of performance is Springfield, Illinois, with a ZIP code of 62702. Although some details such as the specific office address and point of contact are not provided, the contract emphasizes a structured approach to managing the test environment in a secure, transparent, and performance-driven manner.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Cloud Infrastructure Setup and ConfigurationThe contract involves the setup and configuration of a cloud server environment specifically for the CMTS system. It includes tasks such as customization, integration, and the initial deployment of the cloud infrastructure to ensure the system operates effectively. The scope covers establishing a fully functional environment tailored to the unique requirements of the CMTS system within a cloud framework. This subcontract is associated with the Department of the Lottery in Illinois and is focused on work performed in Springfield, ZIP code 62702. The contract falls under the NAICS code 541512, which pertains to computer systems design services, indicating a technical and IT-focused engagement. The project was posted in mid-April 2026, and while specific set-aside details or point-of-contact information are not provided, the contract clearly targets specialized cloud infrastructure services for a government agency.

Computer Systems Design Services

POSTED

DEADLINE

Trademark Portfolio AdministrationThe Trademark Portfolio Administration subcontract supports prime contractors on State of Illinois Department of the Lottery projects by managing the ongoing maintenance, filings, and renewals of trademark portfolios. The selected provider is responsible for tracking renewal deadlines, filing maintenance documents with the USPTO, and utilizing trademark docketing software to ensure all portfolio records remain current. This role requires a legal professional or paralegal specializing in Intellectual Property to deliver a fully maintained trademark portfolio and successfully filed renewal documents. The performance of these services is centered in Springfield, Illinois, under NAICS code 541110.

Offices of Lawyers

POSTED

DEADLINE

Trademark Search and Clearance ServicesThis subcontract for Trademark Search and Clearance Services supports prime contractors on State of Illinois Department of the Lottery projects. The selected provider will perform preliminary trademark searches using the USPTO database and other professional registries to deliver clearance opinions and availability analyses. The contract requires the services of a licensed attorney or certified trademark agent to ensure professional standards in trademark filing and reporting. Performance of these services is centered in Springfield, Illinois, under NAICS code 541110.

Offices of Lawyers

POSTED

DEADLINE

Backup, Disaster Recovery, and Restore TestingThe contract involves the design and implementation of encrypted backup solutions tailored to meet specific Recovery Point Objectives (RPO) and Maximum Tolerable Downtime (MTD) requirements. It encompasses comprehensive disaster recovery strategies, including methodology development, execution of restore demonstrations, and conducting annual testing to ensure the effectiveness of backup and recovery processes. The work will be performed as a subcontract for the Department of the Lottery in Illinois, with the place of performance in Springfield, ZIP code 62702. The scope emphasizes secure data protection and robust recovery capabilities to minimize operational disruption. This includes the integration of encryption measures to safeguard backup data and the execution of regular restore exercises to validate disaster recovery preparedness. The contract aligns with the NAICS code 541512, which relates to computer systems design services. This ensures specialized technical expertise will be applied to maintain continuity and resilience for the Department of the Lottery’s critical IT infrastructure.

Computer Systems Design Services

POSTED

DEADLINE

Training Material Development and User DocumentationThe contract involves the creation of comprehensive user manuals, training materials, and role-based training programs specifically for the Digital Draw System, ensuring alignment with role-based access control (RBAC) and the system's functionalities. This development is crucial for facilitating proper understanding and effective use of the system by various user roles, supporting secure and efficient operation within the Department of the Lottery in Illinois. The contract is a subcontract issued by the Department of the Lottery, with the work to be performed in Springfield, Illinois (zip code 62702). It falls under the NAICS code 541611, which pertains to administrative management and general management consulting services. The contract focuses on delivering educational and documentation resources to enhance user competency and system security, reflecting the agency’s commitment to robust system management and user training.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Accessibility Compliance (IITAA 2.0 / WCAG 2.1 AA)This contract involves ensuring that all system interfaces, documentation, and user tools meet the accessibility standards outlined in IITAA 2.0 and WCAG 2.1 Level AA. The work includes comprehensive testing, remediation of any compliance issues, and ongoing maintenance throughout the lifecycle of the systems to uphold these standards. The objective is to guarantee that accessibility requirements are integrated and maintained consistently to serve all users effectively. The contract is a subcontract under the NAICS code 541519 and is issued by the Illinois Department of the Lottery. The place of performance is Springfield, Illinois, with a postal code of 62702. The solicitation was posted on February 9, 2026. While specific contact details and set-aside information are not provided, this engagement focuses on accessibility compliance to support the agency's IT systems and tools in meeting legal and regulatory requirements.

Other Computer Related Services

POSTED

DEADLINE

Cybersecurity Framework and Data Protection ImplementationThe contract involves the design and implementation of a comprehensive cybersecurity framework for the Illinois Department of the Lottery. Key components of the project include the deployment of multi-factor authentication (MFA), tamper-evident logging systems, data integrity verification procedures, and media sanitization in compliance with NIST SP 800-88 standards. The media sanitization will incorporate advanced crypto-shredding techniques to ensure secure data destruction. Additionally, the contract mandates the development of an incident response plan to address potential cybersecurity threats effectively. This subcontract, categorized under NAICS code 541513, is set to be executed in Springfield, Illinois. The focus is on enhancing data protection measures and securing the organization’s information assets through robust technical and procedural controls. The initiative aims to strengthen the agency’s cybersecurity posture by integrating industry best practices and regulatory compliance, thereby mitigating risks associated with data breaches and unauthorized access.

Computer Facilities Management Services

POSTED

DEADLINE

Secure Digital Lottery System DevelopmentThe contract involves the complete development of a secure, automated Digital Draw System tailored for remote lottery operations. This includes designing the system architecture, software development, integration with existing components, and final deployment. Emphasis is placed on ensuring data integrity, enabling comprehensive auditability, and creating a scalable solution that can accommodate future growth and increased demand. Issued by the Illinois Department of the Lottery, the subcontract is classified under NAICS code 541512, which covers computer systems design services. The work will be performed in Springfield, Illinois, with a focus on delivering a robust and reliable platform to support the lottery’s remote draw functionality. The project aims to enhance operational efficiency and security, ensuring compliance with regulatory standards while providing a transparent and trustworthy lottery draw process.

Computer Systems Design Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS