Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Vulnerability Management and Patching Coordination

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the performance of ongoing vulnerability management and patching coordination for HRSA’s IT infrastructure, with a focus on maintaining robust security hygiene. This includes conducting regular vulnerability scans, prioritizing identified risks based on severity and business impact, coordinating remediation efforts across relevant teams, and validating that patches and fixes have been successfully implemented to close security gaps. The work is centered on ensuring continuous protection of systems and data within HRSA’s environment under the Department of Health and Human Services. The task is structured as a subcontract under NAICS code 541512, which classifies it as computer systems design and related services, and is set to be performed at Rockville, Maryland with a ZIP code of 20852. The contract was posted on May 8, 2026, and while no solicitation number or set-aside details are provided, it is tied directly to HRSA Headquarters and involves hands-on technical coordination across the agency’s digital assets to enhance cyber resilience through systematic and validated remediation practices.

General Info

Contract for regular vulnerability scans, patch coordination, and remediation at HRSA in Rockville, Maryland.

Agency

Department Of Health And Human Services → Hrsa HeadquartersView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Rockville, MD, 20852, USA

Set-Aside

NONE

Documents

This scope was carved out of HHSN316201200126W75R60226F80039.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Information Systems Cyber Security and Privacy Services - Bridge

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedMay 8

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Health And Human Services → Hrsa Headquarters

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Health And Human Services → Hrsa Headquarters

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Conduct regular vulnerability scans, prioritize findings, coordinate patching, and validate remediation across HRSA’s IT infrastructure to maintain security hygiene.

Similar Contracts

Same NAICS industry code

NG-911 CALL HANDLING SYSTEMS AND RELATED HARDWARE, SOFTWARE AND SERVICES

Solicitation # StateOfNewMexico-70-00000-26-00005

The State of New Mexico is seeking proposals for Next Generation 911 call handling systems, including all associated hardware, software, and professional services. This solicitation, identified as StateOfNewMexico-70-00000-26-00005, is aimed at upgrading emergency communication infrastructure to enhance public safety response capabilities. Interested parties must submit their responses by the deadline of September 15, 2026. The procurement process is managed by the State of New Mexico, with Theresa Mendibles serving as the primary point of contact for inquiries. Detailed application and submission instructions are available through the SciQuest bidding portal.

POSTED

about 5 hours ago

DEADLINE

in about 1 month

K-12 Routing and Planning Software DevelopmentSan Jacinto College in Texas is seeking a subcontractor for the development, customization, and support of K-12 routing and planning software. The project focuses on creating advanced routing algorithms and transportation planning tools that integrate seamlessly with GPS and GIS data to optimize student transport. Interested parties must submit their responses by September 11, 2026. This opportunity falls under NAICS code 541512, emphasizing the need for specialized computer systems design services to meet the technical requirements of the transportation software.

San Jacinto College

POSTED

about 6 hours ago

DEADLINE

IT Security Monitoring and Threat ResponseParkland Health and Hospital System in Texas is seeking a subcontractor for IT Security Monitoring and Threat Response. The selected provider will be responsible for delivering 24/7 security monitoring and rapid response capabilities to protect District information systems against threats while adhering to all required security standards. The solicitation was posted on August 13, 2026, with a response deadline of September 9, 2026. This opportunity falls under NAICS code 541512 and is managed through the Parkland Health and Hospital System procurement portal.

Parkland Health and Hospital System

POSTED

about 7 hours ago

DEADLINE

Small Business Subcontracting Participation (General)This general subcontracting opportunity is issued by the Argonne National Laboratory under the Department of Energy to encourage small business participation in future subcontracts. The initiative is governed by FAR 52.219-8 and is specifically targeted toward businesses operating under NAICS code 541512. The opportunity was posted on August 13, 2026, with a response deadline of August 19, 2026. Performance for these subcontracts will take place in Lemont, Illinois, 60439. This notice serves as a general call for small businesses to position themselves for future subcontracting roles once the necessary thresholds are met.

Argonne National Labor - DOE Contractor

POSTED

about 9 hours ago

DEADLINE

Cybersecurity-Compliant IT Services and Software SupportThis subcontract for Cybersecurity-Compliant IT Services and Software Support is issued by Argonne National Laboratory under the Department of Energy. The primary objective is the provision of IT support and software maintenance specifically designed to protect federal contract information. To ensure the security of this data, all services must adhere to strict cybersecurity frameworks, including NIST, SOC2, and FAR requirements. The project is categorized under NAICS code 541512 and will be performed in Lemont, Illinois. Interested parties must submit their responses by August 19, 2026, following the posting date of August 13, 2026.

Argonne National Labor - DOE Contractor

POSTED

about 9 hours ago

DEADLINE

Cybersecurity Compliance and NIST SP 800-171 Assessment SupportThis subcontract opportunity with the Department of Defense, specifically DLA Maritime - Portsmouth, focuses on cybersecurity compliance and NIST SP 800-171 assessment support. The selected provider will be responsible for supporting the implementation and assessment of NIST SP 800-171 controls, which includes the development of the System Security Plan and the submission of the SPRS score. The project is designated as a total Small Business Set Aside under NAICS code 541512 and will be performed in Kittery, Maine. Interested parties must submit their responses by August 19, 2026, following the posting date of August 13, 2026.

DLA Maritime - Portsmouth

POSTED

about 9 hours ago

DEADLINE

DE01 - Sources Sought to identify potential sources capable of meeting the Governments minimum requirements for contractor support to provide application upgrade of Personnel Accountability System (PAS)

Solicitation # N0018926RFI01

The Naval Supply Systems Command Fleet Logistics Center Norfolk is issuing a Request for Information and Sources Sought Notice to identify capable contractors for the application upgrade of the Personnel Accountability System for the Navy CAC Program Management Office. This action is conducted as market research under FAR Part 10 and does not constitute a formal solicitation, a request for proposals, or an obligation for the government to award a contract. The requirement is currently expected to be solicited as an other than small business procurement under NAICS code 541512. Interested firms are invited to provide industry feedback on the draft Performance Work Statement and submit a capability statement including company details, business size, and available contract vehicles. Responses must be non-proprietary, limited to two pages, and submitted via email to the designated point of contact by 4:00 PM Eastern Time on August 19, 2026. The government will not reimburse contractors for any costs associated with the preparation or submission of responses to this notice.

Navsup Flt Logistics Ctr Norfolk

POSTED

about 9 hours ago

DEADLINE

FSA Time Credit Solution

Solicitation # 15BNAS26Q00000075

The Federal Bureau of Prisons within the Department of Justice is seeking proposals for an Enterprise First Step Act Time Credit Management Solution under solicitation 15BNAS26Q00000075. The government requires a mature commercial enterprise solution to modernize, integrate, and sustain the administration of First Step Act Time Credits. This may involve enhancing the existing system or implementing a full replacement to improve security, scalability, and operational efficiency. The scope of work encompasses software licensing, business rules management, automated calculations, cybersecurity support, and long-term technical maintenance. The successful contractor must possess deep subject matter expertise in Federal criminal sentencing and sentence computation to translate regulatory requirements into automated decision logic, though the BOP retains final authority over policy and statutory interpretation. This is a single Firm-Fixed-Price contract to be awarded via a best-value tradeoff process. Interested parties must submit their proposals by August 20, 2026, adhering to the guidelines provided by the National Acquisitions office in Washington, DC.

National Acquisitions - Co

POSTED

about 9 hours ago

DEADLINE

Office of Workforce Development Case Management System

Solicitation # STATE 0000000437SL

The solicitation STATE 0000000437SL, issued by the Office of Administration’s Division of Purchasing on behalf of the Missouri Office of Workforce Development and Information Technology Services Division, seeks a customized Case Management System to support workforce development programs funded by federal grants including TAA and WIOA. The contract requires the vendor to deliver, implement, and maintain a fully functional IT system aligned with state and federal compliance standards, including ADA/Section 508 accessibility, NIST 800-53 security controls, and HIPAA protections. Key deliverables include system customization, ongoing support, training, and mandatory reporting with acceptance governed by the Project Deliverable Acceptance Form. Performance is to occur in Jefferson City, Missouri, with FOB Destination terms placing the risk of loss on the contractor until delivery. The total evaluation score of 200 points prioritizes technical merit at 140 points, factoring in organizational experience, functional capability, past performance case studies, reporting and interface design, and team qualifications, while cost accounts for 50 points and MBE/WBE participation contributes 10 points, indicating a trade-off award approach rather than LPTA. The contractor must comply with stringent security and operational requirements, including nationwide fingerprint-based background checks for all personnel, U.S.-based help desk support, and certification of cybersecurity policies through SOC2 Type 2, ISO27001, or FedRamp/StateRamp. Data ownership rests solely with the state, requiring full surrender and secure transfer of all data upon contract termination, including up to 365 days of transition support. The system must implement multi-factor authentication, encryption, advanced threat detection, annual cybersecurity training, and daily backups with a one-hour restoration objective. The vendor is liable for indemnification of the state against breaches, security failures, and compliance violations. Proposals must be electronically submitted via MissouriBUYS in PDF, Word, or Excel formats, adhering to size limitations and prohibiting embedded media. No federal contract clauses are included, with Missouri state statutes governing contractual obligations and procurement procedures. All submissions require certification of business status and E-Verify enrollment, with no pricing information provided in the solicitation, leaving the contract value undetermined. The contract period extends one year beyond implementation, warranty, and formal acceptance, and no physical packaging, marking, or MIL-STD specifications are referenced.

PROC OA DIVISION OF PURCHASING PROCUREMENTS

POSTED

about 16 hours ago

DEADLINE

Cybersecurity Monitoring

Department of Business, Economic Development, & Tourism

POSTED

about 23 hours ago

DEADLINE

Cloud Migration Services

Department of Business, Economic Development, & Tourism

POSTED

about 23 hours ago

DEADLINE

Network Modernization Project

Solicitation # 20260811079

Nevada County in California is seeking proposals for a Network Modernization Project under solicitation number 20260811079. This project falls under NAICS code 541512 and will be performed in Nevada City, California. Interested parties must submit their responses by the deadline of September 17, 2026. The primary point of contact for this opportunity is Desiree Belding, who can be reached via email or phone for further inquiries.

POSTED

DEADLINE

in about 1 month

More opportunities from Department Of Health And Human Services → Hrsa Headquarters

Same awarding agency

National Lab Certification Testing Services

Solicitation # NLCPRFI2026MarketResearch

The Department of Health and Human Services, through the Substance Abuse and Mental Health Services Administration, is seeking information from qualified sources to support the National Laboratory Certification Program. This mission-critical program ensures the scientific reliability and legal supportability of drug testing results for federal agencies and industries regulated by the Department of Transportation and the Nuclear Regulatory Commission. The government is specifically looking for capabilities in technical and scientific support, forensic toxicology, laboratory inspections, performance testing, and administrative and cost recovery services. This request is a sources-sought notice under NAICS code 541690 to assist in acquisition planning and does not constitute a formal solicitation or an obligation to award a contract. Interested parties must submit their capabilities by August 24, 2026. The primary objective is to identify qualified organizations, including small businesses, that can maintain the continuity of program operations and ensure the integrity of federal workplace drug testing.

Other Scientific and Technical Consulting Services

POSTED

about 9 hours ago

DEADLINE

Security Assessor and Analyst Roles (Tiered Support)The contract seeks to secure cybersecurity analysts at Tier 1 through Tier 3 levels to deliver comprehensive monitoring, analysis, reporting, and technical assessments supporting SIEM operations, incident response, and compliance activities. These roles are critical to maintaining the security posture of the Department of Health and Human Services’ HRSA Headquarters, with all work to be performed at the designated location in Rockville, Maryland, 20852. The analysts will be responsible for identifying threats, investigating incidents, and ensuring adherence to regulatory standards through continuous surveillance and proactive technical evaluations. This subcontract falls under NAICS code 541611, indicating it is categorized under Administrative Management and General Management Consulting Services, reflecting the advisory and operational nature of the support provided. While no specific set-aside details or solicitation number are provided, the posting date of May 8, 2026, suggests this is a forthcoming opportunity, likely intended for vendors capable of delivering skilled cybersecurity personnel with demonstrated experience in tiered support models. The engagement will focus on integrating analytical capabilities into existing security infrastructure to enhance detection, response, and compliance outcomes for a federal health agency.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Information System Security Officer (ISSO) ServicesThe contract seeks to secure dedicated Information System Security Officers (ISSOs) to manage and enhance the security posture of individual HRSA systems under the Department of Health and Human Services. The ISSOs will be responsible for coordinating security audits, overseeing the authorization and accreditation process, ensuring compliance with federal and organizational security policies, and maintaining continuous monitoring of system vulnerabilities and controls. Their role is critical to sustaining the integrity, confidentiality, and availability of sensitive health data managed by HRSA. The services are to be performed primarily at the Rockville, Maryland location with a NAICS code of 541611, indicating professional, scientific, and technical services related to administrative management and general management consulting. This is classified as a subcontract under a larger federal acquisition framework, though no solicitation number or set-aside details are provided. The contract was posted on May 8, 2026, and the performance location is fixed at 20852, emphasizing the need for on-site presence to effectively interface with HRSA systems, personnel, and security infrastructure.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

NIST SP 800-53 Revision 5 Controls Assessment and ImplementationThe contract requires the contractor to conduct comprehensive assessments, implement, and maintain documentation for NIST SP 800-53 Rev 5 security controls across all HRSA systems to ensure ongoing compliance and readiness for audits. This includes evaluating existing controls, identifying gaps, deploying necessary technical and administrative safeguards, and producing accurate, up-to-date documentation that aligns with federal cybersecurity standards. The work is focused on safeguarding sensitive health-related data and systems under the jurisdiction of the Health Resources and Services Administration. The performance location is Rockville, Maryland, with the contract classified as a subcontract under NAICS code 541611, indicating it involves administrative management and general management consulting services. The work supports the Department of Health and Human Services in fulfilling its obligation to secure federal information systems, with an emphasis on continuous compliance, audit preparedness, and alignment with federal cybersecurity frameworks. All activities must be executed in accordance with NIST SP 800-53 Rev 5 requirements, ensuring that HRSA maintains a robust and defensible security posture.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Zero Trust Architecture (ZTA) Implementation SupportThe contract supports the implementation of Zero Trust Architecture across network, identity, and application layers within the Department of Health and Human Services, specifically under HRSA Headquarters. It focuses on deploying micro-segmentation to isolate system components, enforcing rigorous identity verification protocols, and implementing least-privilege access controls to minimize attack surfaces and ensure secure digital environments. The work is scoped to enhance the agency's cybersecurity posture by aligning with modern Zero Trust principles and is expected to be performed in Rockville, Maryland, with a NAICS code of 541512 indicating it falls under computer systems design services. This is a subcontract solicited on May 8, 2026, and is intended to bolster the agency’s infrastructure resilience against evolving cyber threats through comprehensive architectural changes.

Computer Systems Design Services

POSTED

DEADLINE

Cloud Security Monitoring and ComplianceThe contract under the title Cloud Security Monitoring and Compliance requires the implementation and ongoing maintenance of robust security controls for HRSA’s cloud-hosted applications and infrastructure, with a strict focus on adherence to federal cybersecurity standards including FedRAMP and NIST frameworks. The work is critical to ensuring the integrity, confidentiality, and availability of sensitive health data managed by the Department of Health and Human Services and must be performed in compliance with all applicable federal regulations governing cloud environments. This is a subcontract awarded under NAICS code 541512, with the primary place of performance located in Rockville, Maryland, 20852. The contract was posted on May 8, 2026, and the work is intended to support HRSA Headquarters in safeguarding its cloud systems against evolving cyber threats, conducting continuous monitoring, and maintaining audit readiness for federal compliance reviews. All activities must align with the security requirements enforced by federal agencies and are expected to involve automated tools, continuous assessment, incident response, and documentation to meet audit and reporting obligations.

Computer Systems Design Services

POSTED

DEADLINE

Security Information and Event Management (SIEM) OperationsThe contract pertains to the comprehensive monitoring, management, and optimization of Security Information and Event Management (SIEM) platforms within the HRSA IT environment to ensure effective real-time threat detection, log aggregation, correlation, and alerting. The work is focused on maintaining the integrity and responsiveness of the SIEM infrastructure to identify, analyze, and respond to cybersecurity incidents across the organization’s systems. Performance is expected to be delivered at the specified place of performance in Rockville, Maryland, with the North American Industry Classification System code 541512 indicating this is a computer systems design and related services subcontract. The contract was posted on May 8, 2026, under the Department of Health and Human Services, HRSA Headquarters, and operates as a subcontract without any specified set-aside type or organization type designation.

Computer Systems Design Services

POSTED

DEADLINE

Incident Response ServicesThe contract encompasses the provision of comprehensive incident response services to protect HRSA’s more than 60 IT systems, with special emphasis on High Value Assets that process sensitive health data. The contractor is expected to deliver rapid detection, in-depth analysis, immediate containment, and effective remediation of cybersecurity incidents to ensure the integrity, confidentiality, and availability of critical health information. Services must be available 24/7 and aligned with federal cybersecurity standards to address evolving threats in real time. Performance is centered in Rockville, Maryland, with the work falling under the NAICS code 541611 for management, scientific, and technical consulting services. This subcontract is awarded under the Department of Health and Human Services, specifically for HRSA Headquarters, and is open to qualified providers capable of meeting stringent security requirements for handling protected health information. The solicitation was posted on May 8, 2026, and the contractor must maintain readiness to respond to incidents across the full spectrum of HRSA’s IT infrastructure, ensuring compliance and continuity of operations for a vital public health agency.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE