Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Third-Party Risk Management (TPRM) Framework Development

Active

State & Local

Response Deadline10/16/2026, 11:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity with the state of New Mexico focuses on the development of a scalable, multi-tenant Third-Party Risk Management framework for prime contractors working on Office of Cybersecurity projects. The goal is to standardize the processes by which local entities discover, tier, assess, and continuously monitor various external partners, including software providers, resellers, managed service providers, and third-party vendors. The project requires specialized expertise in multi-tenant architecture and supply-chain cybersecurity risk management to ensure a secure and efficient program design. The final deliverable consists of a fully documented TPRM framework and program design. Interested parties must respond by October 16, 2026, under NAICS code 541690.

General Info

New Mexico subcontract for scalable Third-Party Risk Management framework; respond by October 16, 2026.

Agency

New MexicoView Agency

NAICS

541690 - Other Scientific and Technical Consulting ServicesView NAICS

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of OCS2026.01.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Cyber Third-Party Risk Management

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 15

subcontract

Response DeadlineOct 16

Submission deadline

Response Deadline

10/16/2026, 11:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyNew Mexico

ContactsNo contacts available

OfficeN/A

Organization / Agency

New Mexico

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs the design and description of a scalable, multi-tenant TPRM framework for prime contractors on New Mexico Office of Cybersecurity projects. Standardizes how local entities discover, tier, assess, and continuously monitor third-party vendors, resellers, software providers, and managed service providers. Requires expertise in supply-chain cybersecurity risk management and multi-tenant architecture. Delivers a documented TPRM framework and program design.

Similar Contracts

Same NAICS industry code

Technical Documentation & Manual Development

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 10 hours ago

DEADLINE

in about 1 month

RFQ6082 Noise Compliance & Air Quality Testing Services

Solicitation # RFQ6082

Management & Training Corporation (MTC) is seeking bids for a subcontracting opportunity to provide industrial hygienist services at the San Diego Job Corps Center in Imperial Beach, California. The scope of work involves conducting full-day air quality monitoring and occupational noise compliance audits specifically within Building 13 hard-trades shops and Building 225A welding shop. Air quality assessments must evaluate particulate matter, welding fumes, VOCs, combustion gases, and ventilation performance against OSHA, ACGIH, and EPA standards. Noise audits must determine adherence to OSHA 29 CFR 1910.95 exposure thresholds using ANSI-standard instrumentation. Deliverables include comprehensive Air Quality and Noise Compliance reports submitted in PDF format. The solicitation is open to various small business categories, including SDB, WOSB, HUBZone, VOSB, and SDVOSB, under NAICS code 541690. Bidders must submit a bid sheet with a lump sum fee, a completed supplier packet including a W-9 and self-certification form, and proof of insurance by September 16, 2026. Award decisions will be based on best value as determined by MTC. The contract requires compliance with Service Contract Labor Standards and Wage Determination 2015-5635 Rev 29. Additionally, the contractor must adhere to strict government and DOL guidelines regarding the protection of sensitive and proprietary information.

San Diego Job Corps Center

POSTED

about 11 hours ago

DEADLINE

in about 19 hours

Professional Cost Estimating - Water Infrastructure

Antelope Valley-East Kern Water Agency

POSTED

about 13 hours ago

DEADLINE

in about 1 month

Health Information Privacy & Cybersecurity ComplianceThis subcontract for the Defense Health Agency focuses on health information privacy and cybersecurity compliance, specifically supporting prime contractors at Fort Stewart. The scope of work involves performing cybersecurity auditing and PHI data sanitization through the implementation of administrative and technical safeguards. Key responsibilities include conducting physical security audits using the MHS Matrix and ensuring the secure disposal of hard drives in accordance with DoD and NISPOM standards. To maintain compliance, the provider must adhere to DoD 6025 18R and execute a signed Business Associate Agreement. The primary deliverables for this engagement are comprehensive audit reports and official destruction certificates. This opportunity falls under NAICS code 541690 and requires a response by September 18, 2026.

Defense Health Agency

POSTED

about 15 hours ago

DEADLINE

Maintenance and Sustainability PlanningThis subcontract with the Department of Defense for NUWC Division Newport focuses on the creation of a comprehensive Maintenance and Sustainability Plan for prime contractors. The selected provider will be responsible for developing long-term maintenance strategies, including detailed parts replacement cycles and scheduled maintenance protocols specifically designed for systems operating in marine environments. The project requires specialized expertise in naval maintenance standards to ensure the longevity and operational readiness of the equipment. The final deliverable is a completed Maintenance and Sustainability Plan, with a response deadline of September 22, 2026.

Nuwc Division Newport

POSTED

about 15 hours ago

DEADLINE

Epidemiological and Statistical Research SupportThis subcontract for the Department of Veterans Affairs, specifically the Sac Frederick office, focuses on providing advanced statistical analysis and epidemiological consultation for prime contractors working on TBI research projects. The scope of work includes performing analyses on TBI patient cohorts, developing analytical methods for longitudinal research, and translating data into clinical or policy insights. The selected provider must possess specialized expertise in epidemiology and advanced biostatistics to deliver statistical analysis reports and data summaries prepared for peer review. The opportunity is categorized under NAICS code 541690 and is based in Frederick, zip code 21703. It was posted on September 15, 2026, with a response deadline of September 18, 2026.

Sac Frederick (36C10X)

POSTED

about 15 hours ago

DEADLINE

R--Technical Services Support

Solicitation # 89243126RSC000172

The Department of Energy Office of Science is soliciting a single contractor to provide comprehensive technical security support services in Oak Ridge, Tennessee. This 8(a) set-aside procurement under NAICS code 541690 supports the Office of Safety and Security, the Office of Science Consolidated Service Center, and the Oak Ridge Office of Environmental Management. The primary mission is to implement and administer Safeguards and Security programs to protect critical national security assets, including classified information, Controlled Unclassified Information, and Special Nuclear Material Categories I-IV. The scope of work encompasses personnel security, industrial security, information security, and general program support, with a specific requirement to administer the personal identity verification and credentialing program under Homeland Security Presidential Directive-12. The contractor must provide a Program Manager as key personnel and develop a comprehensive Quality Control Plan for DOE review and approval. Operational requirements include strict adherence to DOE directives and all applicable federal, state, and local laws. The contractor is responsible for maintaining a classification program and ensuring all personnel obtain and maintain the necessary access authorization levels. Performance will be monitored through bi-weekly and ad-hoc activity reports submitted to the Contracting Officer's Representative. The solicitation, numbered 89243126RSC000172, has a response deadline of October 14, 2026.

Sc Oak Ridge Office

POSTED

about 15 hours ago

DEADLINE

Aviation Regulatory Compliance ConsultantThe Aviation Regulatory Compliance Consultant subcontract supports the Savannah Airport Commission by managing the registration of transmitters and coordinating with the FAA for prime contractors. The scope of work involves overseeing the registration process for 40 units to ensure full compliance with FCC registration protocols and the FAA Surface Awareness Initiative requirements. The primary objective of this engagement is the delivery of completed registration and official FAA coordination approvals. This project is categorized under NAICS code 541690 and is managed through the state of Georgia, with a response deadline set for October 15, 2026.

Savannah Airport Commission

POSTED

DEADLINE

Quality Assurance/Quality Control (QA/QC) AuditorThis subcontract opportunity is for a Quality Assurance/Quality Control (QA/QC) Auditor to support the California Office of Energy Infrastructure Safety. The selected provider will be responsible for validating the internal QA/QC programs of prime contractors by reviewing electrical corporation protocols, assessing the execution of quality checks, and evaluating overall work quality against established standards. The primary deliverable for this engagement consists of detailed QA/QC validation reports and findings. Qualified candidates must possess demonstrated experience in large-scale utility program quality assessment and are required to submit a signed Conflict of Interest Declaration. This opportunity falls under NAICS code 541690, with a response deadline of November 3, 2026.

Office of Energy Infrastructur

POSTED

DEADLINE

in about 2 months

Data Management & Analysis ServicesThis subcontract for Data Management and Analysis Services supports prime contractors on projects for the Forsyth County Department of Water and Sewer. The selected provider will be responsible for remote data review and quality control, which includes operating the data platform, editing raw data into final records, and utilizing GIS software to generate flow, velocity, and depth hydrographs and scattergraphs. Additionally, the contractor will manage the transition of historical County data onto managed platforms and provide monthly electronic data records and analysis reports. The opportunity is associated with the Forsyth County Board of Commissioners in Georgia under NAICS code 541690. The solicitation was posted on September 14, 2026, with a response deadline of October 15, 2026.

Forsyth County Board of Commissioners

POSTED

DEADLINE

Product Verification Audit (PVA) ServicesThis subcontract opportunity with the Department of Defense, specifically under W6QK Acc-Rsa, involves providing Product Verification Audit services for Army Contracting Command-Redstone aviation projects. The selected provider will be responsible for integrating PVA procedures into overhaul work directives and maintenance data packages to ensure process adequacy for component integrity during remanufacture and rework. The primary deliverable for this effort is the final PVA Report and Certification. The requirement is designated as a total Small Business Set Aside under NAICS code 541690. Interested parties must possess specialized expertise in aviation quality assurance and PVA standards. The solicitation was posted on September 14, 2026, with a response deadline of October 20, 2026.

POSTED

DEADLINE

in about 1 month

Subject Matter Expertise (SME) & Stakeholder EngagementThis subcontract opportunity with the Department of State, managed by Acquisitions Aqm Momentum, seeks a provider to deliver subject matter expertise and stakeholder engagement for prime contractors supporting U.S. law enforcement. The selected provider will be responsible for engaging government officials and cultural institutions, consulting with the Cultural Property Experts On Call program, and conducting concordance assessments to validate AI output against human expert analysis. A deep expertise in cultural property law is required to successfully execute these tasks. The contract requires the delivery of a Stakeholder Engagement Summary and Validated User Workflows. This is a total small business set-aside under NAICS code 541690. Interested parties must respond by September 21, 2026, following the posting date of September 14, 2026.

Acquisitions - Aqm Momentum

POSTED

DEADLINE

More opportunities from New Mexico

Same awarding agency

TPRM Legal and Contracting SupportThe TPRM Legal and Contracting Support subcontract for the state of New Mexico focuses on providing specialized legal expertise to standardize contracting processes between local entities and third-party vendors for projects under the Office of Cybersecurity. The primary objective is to develop standardized contract language, cybersecurity clauses, and compliance requirements to ensure consistency and security across the Third-Party Risk Management program. The selected provider must possess deep expertise in government contracting and cybersecurity law to deliver comprehensive legal guidelines and contracting templates. This opportunity was posted on September 15, 2026, with a response deadline of October 16, 2026, falling under NAICS code 541110.

Offices of Lawyers

POSTED

about 8 hours ago

DEADLINE

in about 1 month

TPRM Toolset Development and DeliveryThis subcontract opportunity with the state of New Mexico focuses on the development and delivery of a technical toolset designed to execute a Third-Party Risk Management framework for prime contractors. The project requires the implementation of software capabilities for vendor discovery, tiering, assessment, and continuous monitoring of cybersecurity risks. The successful provider must demonstrate the ability to develop software for multi-tenant environments and ensure seamless integration with existing cybersecurity monitoring tools to deliver a fully functional platform. The procurement is categorized under NAICS code 541511 and was posted on September 15, 2026. Interested parties must submit their responses by the deadline of October 16, 2026. Further details and application processes are managed through the SciQuest bidding portal.

Custom Computer Programming Services

POSTED

about 8 hours ago

DEADLINE

in about 1 month

Cyber Third-Party Risk Management

Solicitation # OCS2026.01

The New Mexico Office of Cybersecurity has issued solicitation OCS2026.01 for the design, development, and delivery of a scalable, multi-tenant Third-Party Risk Management framework. This project is intended to standardize supply-chain cybersecurity risk management for various local entities, including municipal, county, tribal governments, and higher education institutions. The primary objective is to establish a comprehensive framework capable of managing third-party risks across these diverse organizational types. Interested parties must submit their quotes by the deadline of October 16, 2026, directing all submissions to Melissa Gutierrez at Melissa.Gutierrez@cyber.nm.gov. The solicitation is categorized under NAICS code 541512 and is managed by the state of New Mexico. James Ortega serves as the primary point of contact for the procurement process.

Computer Systems Design Services

POSTED

about 8 hours ago

DEADLINE

in about 1 month

Surveying and Mapping ServicesThis subcontract for Surveying and Mapping Services supports prime contractors on New Mexico Facilities Management Division space management projects. The scope of work involves performing boundary surveying, topographic mapping, and site analysis utilizing GIS software, GPS equipment, and total stations. To be eligible, the provider must hold a Professional Land Surveyor license and is responsible for delivering comprehensive boundary reports, survey maps, and GIS data. The opportunity is categorized under NAICS code 541370 and is associated with the state of New Mexico. Interested parties must submit their responses by October 2, 2026, following the posting date of September 14, 2026. Detailed procurement information and submission portals are available through the New Mexico SciQuest bidding system.

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

Prefabricated Building Supply and InstallationThis subcontract involves the supply and installation of prefabricated buildings for prime contractors working on New Mexico Facilities Management Division state projects. The scope of work encompasses the entire lifecycle of the modular structures, including manufacturing, delivery, and on-site assembly utilizing cranes and necessary foundation materials. All deliverables must adhere to strict building code compliance and include required manufacturer certifications to ensure the delivery of fully installed, compliant structures. The opportunity is listed under NAICS code 321992 for the state of New Mexico. Interested parties must submit their responses by the deadline of October 2, 2026, following the posting date of September 14, 2026. Further details and application processes are managed through the state's SciQuest bidding portal.

Prefabricated Wood Building Manufacturing

POSTED

DEADLINE

IT Infrastructure and Systems ImplementationThis subcontract for IT Infrastructure and Systems Implementation supports prime contractors on New Mexico Facilities Management Division space management projects. The scope of work involves the supply and implementation of IT hardware and software, specifically focusing on system implementation, software deployment, and the installation of server hardware and networking equipment. To qualify, providers must hold the necessary system implementation and software vendor certifications to deliver fully configured IT systems, operational hardware, and software licenses. The opportunity is issued by the state of New Mexico with a response deadline of October 2, 2026. Classified under NAICS code 541512, the contract focuses on delivering integrated technical solutions to ensure the operational success of facility space management initiatives.

Computer Systems Design Services

POSTED

DEADLINE

Architectural and Engineering (A&E) Design ServicesThis subcontract for Architectural and Engineering (A&E) Design Services supports prime contractors on state enterprise space management projects for the New Mexico Facilities Management Division. The scope of work includes providing facilities design, civil engineering, and general engineering services utilizing CAD software and BIM tools to deliver comprehensive design plans, blueprints, engineering specifications, and space management layouts. Qualified providers must hold Professional Engineer or Registered Architect licenses. The opportunity is categorized under NAICS code 541330 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 2, 2026.

Engineering Services

POSTED

DEADLINE

State Enterprise Space Management Program

Solicitation # 27-350-26-00001

The State of New Mexico Facilities Management Division is soliciting proposals for the State Enterprise Space Management Program under solicitation number 27-350-26-00001. This multidisciplinary project encompasses a broad scope of work including architectural and engineering services, IT hardware and software, and the provision of prefabricated buildings, categorized under NAICS code 531312. The solicitation was posted on September 14, 2026, with a response deadline of October 2, 2026. All inquiries should be directed to the FMD Procurement Manager, Joseph Lovato, and all responses must be submitted through the Bonfire procurement portal. Submission via eProNM is explicitly prohibited. Primary point of contact duties are handled by Yuliastuti Wulandari. Interested parties are directed to the official procurement portal for full RFP attachments and detailed specifications.

Nonresidential Property Managers

POSTED

DEADLINE

Supply of Isotopically Labeled ChemicalsThis subcontract involves the supply of isotopically labeled chemicals to prime contractors supporting scientific laboratory projects for the New Mexico Department of Health. The scope of work focuses on providing chemical compounds containing radionuclides or deuterium, which function as internal standards for quantifying substances in biological matrices using chromatography and mass spectrometry. All materials provided must strictly adhere to purity and labeling specifications required for scientific laboratory applications. The opportunity is categorized under NAICS code 325199 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 8, 2026. Further details and application processes are hosted through the New Mexico SciQuest bidding portal.

All Other Basic Organic Chemical Manufacturing

POSTED

DEADLINE

Supply of Forensic Analytical Standards and CRMsThis subcontract involves the supply of certified reference materials, reference materials, and analytical standards for prime contractors supporting New Mexico Department of Health scientific laboratory projects. The scope focuses on providing high-purity chemical standards validated for the forensic analysis of licit and illicit drugs within human biological samples, specifically blood and urine. All materials must adhere to strict precision and accuracy requirements necessary for forensic laboratory certification. The opportunity is listed under NAICS code 424690 and was posted on September 10, 2026, with a response deadline of October 8, 2026. Interested parties can find further details through the State of New Mexico's procurement portal.

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

Infrastructure Material Supply (Concrete & Metal)This subcontract for Infrastructure Material Supply focuses on providing raw materials and pre-cast components for infrastructure repair projects within New Mexico General Services Department cemeteries. The scope of work involves the delivery of specific concrete culverts and metal irrigation piping directly to the project sites to support prime contractors. The opportunity is managed by the state of New Mexico and is categorized under NAICS code 327320. Interested parties must submit their responses by the deadline of October 13, 2026, following the posting date of September 10, 2026.

Ready-Mix Concrete Manufacturing

POSTED

DEADLINE

Pavement Marking & StripingThis subcontract opportunity involves providing pavement marking and striping services for prime contractors working on New Mexico General Services Department cemetery projects. The scope of work includes the removal of existing markings and the application of plastic stripes, legends, and reflective adhesive-backed tape to ensure the delivery of completed pavement markings. The project is categorized under NAICS code 237310 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 13, 2026, with the solicitation having been posted on September 10, 2026.

Highway, Street, and Bridge Construction

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS