Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

TPRM Toolset Development and Delivery

Active

State & Local

Response Deadline10/16/2026, 11:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity with the state of New Mexico focuses on the development and delivery of a technical toolset designed to execute a Third-Party Risk Management framework for prime contractors. The project requires the implementation of software capabilities for vendor discovery, tiering, assessment, and continuous monitoring of cybersecurity risks. The successful provider must demonstrate the ability to develop software for multi-tenant environments and ensure seamless integration with existing cybersecurity monitoring tools to deliver a fully functional platform. The procurement is categorized under NAICS code 541511 and was posted on September 15, 2026. Interested parties must submit their responses by the deadline of October 16, 2026. Further details and application processes are managed through the SciQuest bidding portal.

General Info

New Mexico subcontract for Third-Party Risk Management software development; deadline October 16, 2026.

Agency

New MexicoView Agency

NAICS

541511 - Custom Computer Programming ServicesView NAICS

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of OCS2026.01.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Cyber Third-Party Risk Management

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 15

subcontract

Response DeadlineOct 16

Submission deadline

Response Deadline

10/16/2026, 11:00:00 PM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyNew Mexico

ContactsNo contacts available

OfficeN/A

Organization / Agency

New Mexico

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Develops and delivers the technical toolset required to execute the TPRM framework for prime contractors on New Mexico Office of Cybersecurity projects. Implements tools for vendor discovery, tiering, assessment, and continuous monitoring of third-party cybersecurity risks. Requires software development capabilities for multi-tenant environments and integration with cybersecurity monitoring tools. Delivers a functional TPRM toolset/software platform.

Similar Contracts

Same NAICS industry code

Full-Stack Web Application DevelopmentThis subcontract for Full-Stack Web Application Development involves the creation of a role-based web portal designed for prime contractors on Ohio EPA projects to manage the issuance of operator certificates. The scope of work includes comprehensive requirements gathering and the development of specific modules for facility management, training, certificate generation, and payment processing. The project will be built using the Microsoft technology stack and deployed via Azure Cloud. To ensure system integrity and security, the developer must undergo secure code training and adhere to established frameworks such as NIST 800-53, NIST CSF, or ISO27001. The contract is categorized under NAICS code 541511 and is associated with the EPA's Information Technology Service and Fiscal Administration layers. Interested parties must respond by October 1, 2026.

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

POSTED

about 12 hours ago

DEADLINE

Operator Certification Tracking System

Solicitation # SRC0000041892

The Ohio Environmental Protection Agency is seeking a qualified vendor to implement a modernized, role-based web application for the Operator Certification Tracking System. This solution will consolidate three existing services into a single portal to manage the entire operator certificate issuance process, including training, exam management, facility compliance, and certificate printing. The system must be built on a Microsoft tech stack and can be hosted in a State environment or the Azure Cloud. Key technical requirements include converting the database from SQL Server to PostgreSQL and ensuring integration with the State Single-sign-On and Active Directory. The project follows a phased implementation approach encompassing requirements gathering, application development, data migration, and user acceptance testing. Following the production move, the vendor must provide 600 hours of annual software maintenance for the duration of the system's life. The contract will be awarded to the lowest, responsible, and responsive bidder who is registered with the Office of Budget and Management and provides the required data security documentation. Compliance is a critical component of this contract, requiring adherence to State IT policies and recognized cybersecurity frameworks such as NIST. Vendors must comply with strict data handling standards, including those for Federal Tax Information, HIPAA, and the FBI's CJIS Security Policy. The State reserves the right to conduct security and data protection audits, and final acceptance is contingent upon the contractor curing all audit findings to the State's satisfaction.

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

POSTED

about 12 hours ago

DEADLINE

Encounter Data & Reporting AnalystThis subcontract opportunity for an Encounter Data and Reporting Analyst supports New Hampshire Department of Health and Human Services Medicaid projects. The primary objective is to validate the accuracy and timeliness of encounter data reported by Managed Care Organizations to ensure full compliance with federal reporting requirements. The selected provider will perform detailed data validation on encounter records and analyze aggregated data to produce comprehensive Encounter Data Validation Reports. The role requires advanced expertise in healthcare data analytics and a thorough understanding of Medicaid encounter data processes. Strict adherence to HIPAA and HITECH compliance standards is mandatory. Interested parties must submit their responses by October 14, 2026, under NAICS code 541511.

Dhhs-Department Of Health & Human Services

POSTED

about 13 hours ago

DEADLINE

Comprehensive Engine Management System (CEMS) ReportingThis subcontract, titled Comprehensive Engine Management System (CEMS) Reporting, involves performing data reporting on engine and component status for prime contractors supporting Department of the Air Force projects. The selected provider will be responsible for inputting maintenance status into the Air Force Accountable Property System of Record using the CEMS reporting process and Event Reporting Documents in accordance with TO 00-25-254-1 and DI-MGMT-81324C. The contract is managed by the Department of Defense through the Ok DLA Aviation office in Oklahoma City. To be eligible for system access, the contractor must maintain DFARS 252.204-7012 compliance and undergo a NACI background check. The opportunity falls under NAICS code 541511, with a response deadline of October 15, 2026.

Ok DLA Aviation At Oklahoma City

POSTED

about 16 hours ago

DEADLINE

Aquarius Software Support and Maintenance ServicesThe Aquarius Software Support and Maintenance Services subcontract, posted on September 15, 2026, provides essential technical assistance and maintenance for the Aquarius software environment used by prime contractors on National Park Service projects. Managed under the Department of the Interior for Ser South Mabo, the contract focuses on ensuring the continuous operation of hydrologic and environmental data systems through software updates, configuration management, and technical support resolution. The scope of work requires specialized expertise in Aquarius software workflows and configurations to deliver consistent maintenance reports and system updates. This opportunity falls under NAICS code 541511 and has a response deadline of September 18, 2026.

Ser South Mabo (54000)

POSTED

about 16 hours ago

DEADLINE

Olfactometry and Chromatographic Data Software IntegrationThis subcontract for the USDA Agricultural Research Service involves the installation and integration of specialized scientific software to support prime contractors. The primary objective is to integrate sampler systems with Agilent ChemStation software to produce real-time olfactory event markers, odor intensity measurements, and spoken odor qualities. The project requires the implementation of a single-platform visualization tool capable of managing olfactory, chromatographic, and mass spectral data. The final deliverable is a fully configured software platform designed for automated sampling, with performance taking place in Albany.

USDA Ars Afm Apd

POSTED

about 16 hours ago

DEADLINE

Bioinformatics and Data Processing ServicesThis subcontract for Bioinformatics and Data Processing Services supports USDA Agricultural Research Service projects by converting raw genomic sequence data into electronic formats. The scope of work involves primary and secondary data processing, including quality filtering and data cleaning, utilizing bioinformatics pipelines and high-performance computing clusters. All operations must adhere to NIST 800-171 cybersecurity standards to ensure data integrity and security. The opportunity is a total Small Business Set Aside under NAICS code 541511, managed by the Department of Agriculture's Region 3 Southwestern Regional Office. Performance of the contract is based in Raleigh, North Carolina. Interested parties must respond by September 21, 2026.

Region 3 Southwestern Regional Office

POSTED

about 16 hours ago

DEADLINE

Software Licensing & Lifecycle ManagementThis subcontract, titled Software Licensing and Lifecycle Management, is issued by the Department of Defense under the W6QM Micc-Ft Gordon agency. The project focuses on the provisioning, deployment, and lifecycle maintenance of fifteen software licenses for prime contractors supporting Department of the Army OEMTD projects. All activities must be executed in accordance with PWS Section 4.4 to ensure a fully functional and available software environment. The opportunity is designated as a Total Small Business Set Aside under NAICS code 541511. Performance will take place at Fort Gordon, Georgia. The solicitation was posted on September 15, 2026, with a response deadline of September 21, 2026.

W6QM Micc-Ft Gordon

POSTED

about 16 hours ago

DEADLINE

Longitudinal Health Data Processing and HarmonizationThis subcontract for the Department of Veterans Affairs at the Sac Frederick location focuses on the technical processing, validation, and harmonization of longitudinal health data. The selected provider will support prime contractors on health informatics projects by executing VA-to-national-TBIMS data mappings, implementing harmonized data structures, and conducting quality assurance to ensure the integrity of historical data. The project requires specialized experience with national longitudinal rehabilitation-research databases to deliver validated datasets and comprehensive data quality reports. This opportunity falls under NAICS code 541511 and is based in Frederick, with a response deadline of September 18, 2026.

Sac Frederick (36C10X)

POSTED

about 16 hours ago

DEADLINE

FY26 ODS OEMTD REFoRM WOIC

Solicitation # W9124926RA025

Solicitation W9124926RA025 is a firm-fixed-price, non-personal services contract issued by the Department of the Army for the Electronic Maintenance Ordnance School at Fort Gordon, Georgia. The objective is to provide an Augmented Reality (AR) and Virtual Reality (VR) learning environment to modernize training for the 948B WOIC Electronic Systems Maintenance course, specifically focusing on the AN/TPN-31(V)8 ATNAVICS system. The scope of work includes program management, the development of immersive task instruction and 3D digital twins, the procurement of 30 hardware devices including Meta Quest 3s, iPad Pros, and iPad Minis, software licenses for 15 users, and train-the-trainer services. The contract is a total small business set-aside, also open to HubZone and SDVOSB entities, under NAICS code 541511. The base period of performance runs from September 30, 2026, to September 29, 2027, with options for annual renewal. Key requirements include the delivery of a Quality Control Program within 30 days of award and adherence to strict performance standards, such as 98 percent software uptime during duty hours and 100 percent hardware delivery compliance. Personnel must maintain an unclassified security clearance, and all software must comply with DoD cybersecurity requirements for five years. Payment will be processed electronically via the Wide Area WorkFlow system.

W6QM Micc-Ft Gordon

POSTED

about 16 hours ago

DEADLINE

CA18461 - DN Colleges Group - ITT for the Provision of Website Development Services

Solicitation # 25f943a1-26c4-4323-901c-c21ba1d5420c

DN Colleges Group is seeking an experienced website development supplier to consolidate and redevelop its public-facing website estate. The scope of work is comprehensive, encompassing discovery, audit, information architecture, UX prototyping, and the development of a WordPress multisite platform. The project also includes content rationalisation, SEO and redirect management, accessibility compliance, and final handover. The selected supplier will collaborate with internal marketing and technical teams while coordinating with separate brand and Salesforce CRM initiatives. Interested parties must apply through the MultiQuote portal using reference CA18461, with a response deadline of September 29, 2026.

DN Colleges Group

POSTED

about 17 hours ago

DEADLINE

GIS & Asset ManagementThis subcontract for the Town of Granite Falls, North Carolina, focuses on the delivery of Geographic Information Systems (GIS) and asset management services. The selected provider will support prime contractors by executing data management, mapping, utility system integration, and condition assessments. Key deliverables include the creation of GIS databases, asset registries, and detailed condition assessment reports utilizing ArcGIS and specialized asset management software. To qualify for this role, the provider must hold a GIS Professional (GISP) certification. The contract falls under NAICS code 541511 and was posted on September 15, 2026, with a response deadline of September 18, 2026.

Town of Granite Falls

POSTED

about 23 hours ago

DEADLINE

More opportunities from New Mexico

Same awarding agency

TPRM Legal and Contracting SupportThe TPRM Legal and Contracting Support subcontract for the state of New Mexico focuses on providing specialized legal expertise to standardize contracting processes between local entities and third-party vendors for projects under the Office of Cybersecurity. The primary objective is to develop standardized contract language, cybersecurity clauses, and compliance requirements to ensure consistency and security across the Third-Party Risk Management program. The selected provider must possess deep expertise in government contracting and cybersecurity law to deliver comprehensive legal guidelines and contracting templates. This opportunity was posted on September 15, 2026, with a response deadline of October 16, 2026, falling under NAICS code 541110.

Offices of Lawyers

POSTED

about 9 hours ago

DEADLINE

in about 1 month

Third-Party Risk Management (TPRM) Framework DevelopmentThis subcontract opportunity with the state of New Mexico focuses on the development of a scalable, multi-tenant Third-Party Risk Management framework for prime contractors working on Office of Cybersecurity projects. The goal is to standardize the processes by which local entities discover, tier, assess, and continuously monitor various external partners, including software providers, resellers, managed service providers, and third-party vendors. The project requires specialized expertise in multi-tenant architecture and supply-chain cybersecurity risk management to ensure a secure and efficient program design. The final deliverable consists of a fully documented TPRM framework and program design. Interested parties must respond by October 16, 2026, under NAICS code 541690.

Other Scientific and Technical Consulting Services

POSTED

about 9 hours ago

DEADLINE

in about 1 month

Cyber Third-Party Risk Management

Solicitation # OCS2026.01

The New Mexico Office of Cybersecurity has issued solicitation OCS2026.01 for the design, development, and delivery of a scalable, multi-tenant Third-Party Risk Management framework. This project is intended to standardize supply-chain cybersecurity risk management for various local entities, including municipal, county, tribal governments, and higher education institutions. The primary objective is to establish a comprehensive framework capable of managing third-party risks across these diverse organizational types. Interested parties must submit their quotes by the deadline of October 16, 2026, directing all submissions to Melissa Gutierrez at Melissa.Gutierrez@cyber.nm.gov. The solicitation is categorized under NAICS code 541512 and is managed by the state of New Mexico. James Ortega serves as the primary point of contact for the procurement process.

Computer Systems Design Services

POSTED

about 9 hours ago

DEADLINE

in about 1 month

Surveying and Mapping ServicesThis subcontract for Surveying and Mapping Services supports prime contractors on New Mexico Facilities Management Division space management projects. The scope of work involves performing boundary surveying, topographic mapping, and site analysis utilizing GIS software, GPS equipment, and total stations. To be eligible, the provider must hold a Professional Land Surveyor license and is responsible for delivering comprehensive boundary reports, survey maps, and GIS data. The opportunity is categorized under NAICS code 541370 and is associated with the state of New Mexico. Interested parties must submit their responses by October 2, 2026, following the posting date of September 14, 2026. Detailed procurement information and submission portals are available through the New Mexico SciQuest bidding system.

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

Prefabricated Building Supply and InstallationThis subcontract involves the supply and installation of prefabricated buildings for prime contractors working on New Mexico Facilities Management Division state projects. The scope of work encompasses the entire lifecycle of the modular structures, including manufacturing, delivery, and on-site assembly utilizing cranes and necessary foundation materials. All deliverables must adhere to strict building code compliance and include required manufacturer certifications to ensure the delivery of fully installed, compliant structures. The opportunity is listed under NAICS code 321992 for the state of New Mexico. Interested parties must submit their responses by the deadline of October 2, 2026, following the posting date of September 14, 2026. Further details and application processes are managed through the state's SciQuest bidding portal.

Prefabricated Wood Building Manufacturing

POSTED

DEADLINE

IT Infrastructure and Systems ImplementationThis subcontract for IT Infrastructure and Systems Implementation supports prime contractors on New Mexico Facilities Management Division space management projects. The scope of work involves the supply and implementation of IT hardware and software, specifically focusing on system implementation, software deployment, and the installation of server hardware and networking equipment. To qualify, providers must hold the necessary system implementation and software vendor certifications to deliver fully configured IT systems, operational hardware, and software licenses. The opportunity is issued by the state of New Mexico with a response deadline of October 2, 2026. Classified under NAICS code 541512, the contract focuses on delivering integrated technical solutions to ensure the operational success of facility space management initiatives.

Computer Systems Design Services

POSTED

DEADLINE

Architectural and Engineering (A&E) Design ServicesThis subcontract for Architectural and Engineering (A&E) Design Services supports prime contractors on state enterprise space management projects for the New Mexico Facilities Management Division. The scope of work includes providing facilities design, civil engineering, and general engineering services utilizing CAD software and BIM tools to deliver comprehensive design plans, blueprints, engineering specifications, and space management layouts. Qualified providers must hold Professional Engineer or Registered Architect licenses. The opportunity is categorized under NAICS code 541330 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 2, 2026.

Engineering Services

POSTED

DEADLINE

State Enterprise Space Management Program

Solicitation # 27-350-26-00001

The State of New Mexico Facilities Management Division is soliciting proposals for the State Enterprise Space Management Program under solicitation number 27-350-26-00001. This multidisciplinary project encompasses a broad scope of work including architectural and engineering services, IT hardware and software, and the provision of prefabricated buildings, categorized under NAICS code 531312. The solicitation was posted on September 14, 2026, with a response deadline of October 2, 2026. All inquiries should be directed to the FMD Procurement Manager, Joseph Lovato, and all responses must be submitted through the Bonfire procurement portal. Submission via eProNM is explicitly prohibited. Primary point of contact duties are handled by Yuliastuti Wulandari. Interested parties are directed to the official procurement portal for full RFP attachments and detailed specifications.

Nonresidential Property Managers

POSTED

DEADLINE

Supply of Isotopically Labeled ChemicalsThis subcontract involves the supply of isotopically labeled chemicals to prime contractors supporting scientific laboratory projects for the New Mexico Department of Health. The scope of work focuses on providing chemical compounds containing radionuclides or deuterium, which function as internal standards for quantifying substances in biological matrices using chromatography and mass spectrometry. All materials provided must strictly adhere to purity and labeling specifications required for scientific laboratory applications. The opportunity is categorized under NAICS code 325199 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 8, 2026. Further details and application processes are hosted through the New Mexico SciQuest bidding portal.

All Other Basic Organic Chemical Manufacturing

POSTED

DEADLINE

Supply of Forensic Analytical Standards and CRMsThis subcontract involves the supply of certified reference materials, reference materials, and analytical standards for prime contractors supporting New Mexico Department of Health scientific laboratory projects. The scope focuses on providing high-purity chemical standards validated for the forensic analysis of licit and illicit drugs within human biological samples, specifically blood and urine. All materials must adhere to strict precision and accuracy requirements necessary for forensic laboratory certification. The opportunity is listed under NAICS code 424690 and was posted on September 10, 2026, with a response deadline of October 8, 2026. Interested parties can find further details through the State of New Mexico's procurement portal.

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

Infrastructure Material Supply (Concrete & Metal)This subcontract for Infrastructure Material Supply focuses on providing raw materials and pre-cast components for infrastructure repair projects within New Mexico General Services Department cemeteries. The scope of work involves the delivery of specific concrete culverts and metal irrigation piping directly to the project sites to support prime contractors. The opportunity is managed by the state of New Mexico and is categorized under NAICS code 327320. Interested parties must submit their responses by the deadline of October 13, 2026, following the posting date of September 10, 2026.

Ready-Mix Concrete Manufacturing

POSTED

DEADLINE

Pavement Marking & StripingThis subcontract opportunity involves providing pavement marking and striping services for prime contractors working on New Mexico General Services Department cemetery projects. The scope of work includes the removal of existing markings and the application of plastic stripes, legends, and reflective adhesive-backed tape to ensure the delivery of completed pavement markings. The project is categorized under NAICS code 237310 and is managed by the state of New Mexico. Interested parties must submit their responses by the deadline of October 13, 2026, with the solicitation having been posted on September 10, 2026.

Highway, Street, and Bridge Construction

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS