Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Vulnerability Management and Patching Coordination

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the performance of ongoing vulnerability management and patching coordination for HRSA’s IT infrastructure, with a focus on maintaining robust security hygiene. This includes conducting regular vulnerability scans, prioritizing identified risks based on severity and business impact, coordinating remediation efforts across relevant teams, and validating that patches and fixes have been successfully implemented to close security gaps. The work is centered on ensuring continuous protection of systems and data within HRSA’s environment under the Department of Health and Human Services. The task is structured as a subcontract under NAICS code 541512, which classifies it as computer systems design and related services, and is set to be performed at Rockville, Maryland with a ZIP code of 20852. The contract was posted on May 8, 2026, and while no solicitation number or set-aside details are provided, it is tied directly to HRSA Headquarters and involves hands-on technical coordination across the agency’s digital assets to enhance cyber resilience through systematic and validated remediation practices.

General Info

Contract for regular vulnerability scans, patch coordination, and remediation at HRSA in Rockville, Maryland.

Agency

Department Of Health And Human Services → Hrsa Headquarters

NAICS

541512 - Computer Systems Design Services

Place of Performance

Rockville, MD, 20852, USA

Set-Aside

NONE

Documents

This scope was carved out of HHSN316201200126W75R60226F80039.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Information Systems Cyber Security and Privacy Services - Bridge

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedMay 8

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Health And Human Services → Hrsa Headquarters

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Health And Human Services → Hrsa Headquarters

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Conduct regular vulnerability scans, prioritize findings, coordinate patching, and validate remediation across HRSA’s IT infrastructure to maintain security hygiene.

Similar Contracts

Same NAICS industry code

MetroAccess Fare Collection and Management System

Solicitation # WMATA-0000010941

The Washington Metropolitan Area Transit Authority is seeking proposals for the MetroAccess Fare Collection and Management System under solicitation number WMATA-0000010941. This project falls under NAICS code 541512, focusing on computer systems design services to modernize or manage the fare collection infrastructure for its transit services. The solicitation was posted on September 30, 2026, with a response deadline set for October 20, 2026. Interested parties must submit their responses through the official WMATA supplier portal by the specified cutoff date to be considered for the contract.

Washington Metropolitan Area Transit Authority

POSTED

about 7 hours ago

DEADLINE

Emergency Management Platform Replacement Project

Solicitation # WMATA-0000010922

The Washington Metropolitan Area Transit Authority is seeking proposals for the Emergency Management Platform Replacement Project under solicitation number WMATA-0000010922. This project falls under NAICS code 541512, focusing on computer systems design services to modernize the agency's emergency management infrastructure. The solicitation was posted on September 30, 2026, with a strict response deadline of October 2, 2026. Interested parties must submit their responses through the official WMATA supplier portal by the specified cutoff date.

Washington Metropolitan Area Transit Authority

POSTED

about 7 hours ago

DEADLINE

Electronic Disease Surveillance System (EDSS)

Solicitation # 27-0908002-001

The South Dakota Department of Health, in coordination with the Bureau of Information and Technology, has issued Request for Proposal 27-0908002-001 to solicit a secure, configurable, and interoperable Electronic Disease Surveillance System (EDSS). The objective is to modernize or replace the state's current system to support comprehensive statewide communicable disease surveillance. The selected vendor will be responsible for providing the software platform and a full suite of implementation services, including configuration, integration, data migration, testing, training, go-live support, and ongoing maintenance. Key functional requirements include case intake and triage, disease investigation, workflow management, laboratory and clinical data exchange, and robust reporting and analytics to meet both state and federal obligations. Proposals must be submitted via Secured File Transfer Protocol (SFTP) in PDF format by the deadline of October 19, 2026. The evaluation process will utilize subjective judgment to assess offerors based on technical competence, IT requirements, resource availability, past performance, project management capabilities, and the ability to handle project constraints. Additionally, the Bureau of Information and Technology must provide an approved assessment of the proposal. The contract will incorporate standard state terms, required IT contract terms from Appendix A, and specific security policies. Successful offerors must comply with strict data handling and security protocols, including fingerprint-based background investigations for personnel accessing sensitive information such as PII, PHI, and FTI. An award decision is anticipated by December 31, 2026.

South Dakota State Government

POSTED

about 17 hours ago

DEADLINE

Request for Information: Revolutionary (REV) Air Operations Center (AOC) Weapon System

Solicitation # FA8730-REV-AOC

The Revolutionary Air Operations Center Weapon System Request for Information, solicitation FA8730-REV-AOC, is issued by Kessel Run and the PAE C3BM/C3CO AOC Program Office. The government is seeking industry feedback to modernize and sustain the AOC Weapon System, which is a complex system-of-systems comprising diverse hardware, software, and web services. The primary objective is to develop a centrally managed, secure, and resilient architecture that supports hybrid cloud and on-premises operations, ensuring 24/7/365 availability in contested environments. A key focus of this effort is researching contract modularization for integration work to increase competition and performance while leveraging Government Off-the-Shelf and Commercial Off-the-Shelf solutions to prevent vendor lock and expedite deployment. Technical requirements emphasize automated cybersecurity and configuration management, interoperability across heterogeneous virtual machines and Kubernetes-based environments, and consistent operational baselines across geographically distributed locations. Interested parties must submit a white paper of no more than eight pages in PDF format, using 12-point font, by October 14, 2026. Submissions should be sent via email or the DoD Secure Access File Exchange to the designated points of contact. Respondents must provide company details, including CAGE code, facility clearance level, and socio-economic status under NAICS codes 541511 or 541512. This is a voluntary RFI for planning purposes and does not constitute a formal request for proposal or a commitment to contract.

FA8730 Kessel Run Aflcmc/hbbk

POSTED

about 23 hours ago

DEADLINE

Electronic Security System VIII Official Solicitation

Solicitation # W912DY26RA012

W2V6 USA Engineering Spt Ctr Huntsvil

POSTED

about 23 hours ago

DEADLINE

in about 1 month

Modernization of the Influenza-Like Illness (ILI) Surveillance Process and Algorithms Project

Solicitation # 75H70427Q00001

Division Of Acquisitions Policy Hq

POSTED

about 23 hours ago

DEADLINE

TOTAL ENGINEERING AND INTEGRATION SERVICES (TEIS) IV On-Ramp Opportunity

Solicitation # W91RUS27RA001

The Total Engineering and Integration Services (TEIS) IV program is a multiple-award IDIQ acquisition providing information systems engineering and IT support services to the United States Army Information Systems Engineering Command (USAISEC). The program supports the full project life cycle, including planning, design, development, implementation, procurement, logistics, evaluation, testing, and sustainment of information and communication systems. These services are required worldwide, encompassing secure facilities, remote locations, and potentially hostile environments. The contract has a maximum ceiling of 800 million dollars, with a minimum guaranteed value of 50,000 dollars. The base ordering period is five years, ending November 30, 2026, with an optional five-year extension that may extend the cumulative period to ten years. The solicitation is open to full and open competition with small business reserves under NAICS code 541512. Award decisions are based on a weighted evaluation of technical approach, past performance, small business participation, and cost/price, with the technical approach being the most significant factor. Technical evaluations focus on three sample tasks covering cybersecurity, satellite communications, and other specialized technologies. Security requirements are stringent, involving Top Secret facility clearances, Secret safeguarding, and adherence to Intelligence Community Directives for Sensitive Compartmented Information (SCI) and SCIF management. Administration is handled by the Army Contracting Command Aberdeen Proving Ground at Fort Huachuca, Arizona, with invoicing processed through the Wide Area Workflow system.

W6QK Acc-Apg Contr Ctr

POSTED

about 23 hours ago

DEADLINE

in about 1 month

REQUEST FOR INFORMATION (RFI)/ SOURCES SOUGHT Space Force Mission Delta 9 (MD9)

Solicitation # RFI-MD9-2026-01

Mission Delta 9 (MD9), the United States Space Force's designated orbital warfare organization headquartered at Schriever Space Force Base, Colorado, is conducting market research for an enterprise Commercial Solutions Opening (CSO) under DFARS 212.70. The objective is to acquire innovative commercial products, technologies, and services to enhance operational capabilities in orbital warfare, space domain awareness, and on-orbit experimentation. The scope of work focuses on four primary areas: Training, Space and Ground Sustainment, Contractor Operations/Support, and Capability Gaps. This unrestricted, full and open effort may result in FAR-based Fixed-Price contracts or Other Transaction Agreements (OTAs), with a total contractual funding ceiling of up to 100 million dollars. The acquisition process utilizes a phased evaluation framework consisting of a Phase I white paper and PowerPoint briefing, an optional Phase II pitch session, and a Phase III full technical and price proposal. Proposals are evaluated based on technical merit, applicability, feasibility, and price reasonableness, though they are not compared against one another. Interested industry partners must submit an unclassified capability statement and complete the required RFI questionnaires by October 12, 2026. Key compliance requirements include a current NIST SP 800-171 assessment posted in the Supplier Performance Risk System (SPRS) and a mandatory Organizational Conflict of Interest (OCI) analysis for Phase III proposals. Performance may occur at multiple locations, including Kirtland Air Force Base, New Mexico.

FA2518 Ussf Spoc/saio

POSTED

about 23 hours ago

DEADLINE

HCM Data Integration and Enablement Services

Solicitation # WS5820650376

The Government of Canada, through the Department of Public Works and Government Services, is soliciting offers for System Integrator services to support the HR-to-Pay transformation. The selected provider will be responsible for the integration, testing, deployment, and ongoing support of cloud services and Human Capital Management data capabilities. This comprehensive scope includes managing related business processes, reporting, change management, training, and data conversion activities. This federal solicitation, identified by number WS5820650376, requires performance within the National Capital Region. Interested offerors must submit their responses by the deadline of October 23, 2026. The project falls under NAICS code 541512, focusing on computer systems design services to enable critical HR and pay data functionality for the agency.

Department of Public Works and Government Services

POSTED

DEADLINE

University of Calgary - Request for Proposal - Data Center Consultants

Solicitation # AB-2026-06576

The University of Calgary is seeking qualified suppliers to provide consulting services for its current data center environments through solicitation AB-2026-06576. The scope of work encompasses data center operations, infrastructure, planning, and support, with the intention of awarding agreements to multiple proponents who offer the best overall functionality and value. Interested parties must submit their proposals by the deadline of October 29, 2026, at 6:00 PM. This request for proposal includes a mandatory requirement that proponents must meet to be considered. The project will be performed in Calgary, Alberta, and inquiries can be directed to the Senior Procurement Specialist, Helina So.

University of Calgary

POSTED

DEADLINE

INFOR V11 Multi-tenant Cloud Implementation Services

Solicitation # RFP-4190-001-27

The Trinity River Authority of Texas is soliciting competitive proposals for professional implementation services to migrate from its existing Infor Lawson V10 and various third-party legacy systems, such as UKG and Maximo, to an Infor CloudSuite V11 Multi-Tenant cloud environment. The comprehensive scope of work includes the deployment of Finance, Supply Chain Management, Human Capital Management, Payroll, and Workforce Management modules, alongside the implementation of the Infor ION Platform and Velocity Suite. The selected vendor will be responsible for the entire project lifecycle, including business process analysis, system configuration, data conversion, systems integration, testing, training, organizational change management, and post-implementation hypercare support. This is a firm-fixed-price contract awarded to the most advantageous proposer based on a combination of price and technical factors, including qualifications, methodology, and experience. Proposals must be submitted electronically via the ProcureWare system by the October 23, 2026, deadline. Qualified firms must demonstrate extensive experience with public sector ERP projects and provide a highly skilled project team, including dedicated leads for finance, HCM, integration, and change management. Compliance requirements include adherence to WCAG 2.2 accessibility standards, provision of SOC reports, and verification of cybersecurity training. Payment is structured around specific project milestones, with a ten percent retainage held until the successful completion of the go-live and hypercare periods.

Trinity River Authority of Texas

POSTED

DEADLINE

Kneehill County - Request for Proposal - Bulk Water System Upgrades, Kneehill County

Solicitation # AB-2026-06565

Kneehill County is soliciting proposals for the replacement and standardization of bulk water management and payment systems across six fill stations in Alberta. The objective is to implement a secure, modern solution that enhances administrative efficiency, financial accountability, and the overall customer experience. The selected provider will be responsible for the supply, configuration, installation, testing, training, and commissioning of all necessary hardware, software, and communications equipment. Qualified proponents must demonstrate specific expertise in bulk water management systems and possess the operational capacity and personnel required to execute the project. All proposals must be submitted by 11:59:59 AM local time on October 26, 2026. Inquiries regarding this solicitation, identified as AB-2026-06565, should be directed to Will Nyman, the General Manager of Corporate Services.

Kneehill County

POSTED

DEADLINE

More opportunities from Department Of Health And Human Services → Hrsa Headquarters

Same awarding agency

Security Assessor and Analyst Roles (Tiered Support)The contract seeks to secure cybersecurity analysts at Tier 1 through Tier 3 levels to deliver comprehensive monitoring, analysis, reporting, and technical assessments supporting SIEM operations, incident response, and compliance activities. These roles are critical to maintaining the security posture of the Department of Health and Human Services’ HRSA Headquarters, with all work to be performed at the designated location in Rockville, Maryland, 20852. The analysts will be responsible for identifying threats, investigating incidents, and ensuring adherence to regulatory standards through continuous surveillance and proactive technical evaluations. This subcontract falls under NAICS code 541611, indicating it is categorized under Administrative Management and General Management Consulting Services, reflecting the advisory and operational nature of the support provided. While no specific set-aside details or solicitation number are provided, the posting date of May 8, 2026, suggests this is a forthcoming opportunity, likely intended for vendors capable of delivering skilled cybersecurity personnel with demonstrated experience in tiered support models. The engagement will focus on integrating analytical capabilities into existing security infrastructure to enhance detection, response, and compliance outcomes for a federal health agency.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Information System Security Officer (ISSO) ServicesThe contract seeks to secure dedicated Information System Security Officers (ISSOs) to manage and enhance the security posture of individual HRSA systems under the Department of Health and Human Services. The ISSOs will be responsible for coordinating security audits, overseeing the authorization and accreditation process, ensuring compliance with federal and organizational security policies, and maintaining continuous monitoring of system vulnerabilities and controls. Their role is critical to sustaining the integrity, confidentiality, and availability of sensitive health data managed by HRSA. The services are to be performed primarily at the Rockville, Maryland location with a NAICS code of 541611, indicating professional, scientific, and technical services related to administrative management and general management consulting. This is classified as a subcontract under a larger federal acquisition framework, though no solicitation number or set-aside details are provided. The contract was posted on May 8, 2026, and the performance location is fixed at 20852, emphasizing the need for on-site presence to effectively interface with HRSA systems, personnel, and security infrastructure.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

NIST SP 800-53 Revision 5 Controls Assessment and ImplementationThe contract requires the contractor to conduct comprehensive assessments, implement, and maintain documentation for NIST SP 800-53 Rev 5 security controls across all HRSA systems to ensure ongoing compliance and readiness for audits. This includes evaluating existing controls, identifying gaps, deploying necessary technical and administrative safeguards, and producing accurate, up-to-date documentation that aligns with federal cybersecurity standards. The work is focused on safeguarding sensitive health-related data and systems under the jurisdiction of the Health Resources and Services Administration. The performance location is Rockville, Maryland, with the contract classified as a subcontract under NAICS code 541611, indicating it involves administrative management and general management consulting services. The work supports the Department of Health and Human Services in fulfilling its obligation to secure federal information systems, with an emphasis on continuous compliance, audit preparedness, and alignment with federal cybersecurity frameworks. All activities must be executed in accordance with NIST SP 800-53 Rev 5 requirements, ensuring that HRSA maintains a robust and defensible security posture.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Zero Trust Architecture (ZTA) Implementation SupportThe contract supports the implementation of Zero Trust Architecture across network, identity, and application layers within the Department of Health and Human Services, specifically under HRSA Headquarters. It focuses on deploying micro-segmentation to isolate system components, enforcing rigorous identity verification protocols, and implementing least-privilege access controls to minimize attack surfaces and ensure secure digital environments. The work is scoped to enhance the agency's cybersecurity posture by aligning with modern Zero Trust principles and is expected to be performed in Rockville, Maryland, with a NAICS code of 541512 indicating it falls under computer systems design services. This is a subcontract solicited on May 8, 2026, and is intended to bolster the agency’s infrastructure resilience against evolving cyber threats through comprehensive architectural changes.

Computer Systems Design Services

POSTED

DEADLINE

Cloud Security Monitoring and ComplianceThe contract under the title Cloud Security Monitoring and Compliance requires the implementation and ongoing maintenance of robust security controls for HRSA’s cloud-hosted applications and infrastructure, with a strict focus on adherence to federal cybersecurity standards including FedRAMP and NIST frameworks. The work is critical to ensuring the integrity, confidentiality, and availability of sensitive health data managed by the Department of Health and Human Services and must be performed in compliance with all applicable federal regulations governing cloud environments. This is a subcontract awarded under NAICS code 541512, with the primary place of performance located in Rockville, Maryland, 20852. The contract was posted on May 8, 2026, and the work is intended to support HRSA Headquarters in safeguarding its cloud systems against evolving cyber threats, conducting continuous monitoring, and maintaining audit readiness for federal compliance reviews. All activities must align with the security requirements enforced by federal agencies and are expected to involve automated tools, continuous assessment, incident response, and documentation to meet audit and reporting obligations.

Computer Systems Design Services

POSTED

DEADLINE

Security Information and Event Management (SIEM) OperationsThe contract pertains to the comprehensive monitoring, management, and optimization of Security Information and Event Management (SIEM) platforms within the HRSA IT environment to ensure effective real-time threat detection, log aggregation, correlation, and alerting. The work is focused on maintaining the integrity and responsiveness of the SIEM infrastructure to identify, analyze, and respond to cybersecurity incidents across the organization’s systems. Performance is expected to be delivered at the specified place of performance in Rockville, Maryland, with the North American Industry Classification System code 541512 indicating this is a computer systems design and related services subcontract. The contract was posted on May 8, 2026, under the Department of Health and Human Services, HRSA Headquarters, and operates as a subcontract without any specified set-aside type or organization type designation.

Computer Systems Design Services

POSTED

DEADLINE

Incident Response ServicesThe contract encompasses the provision of comprehensive incident response services to protect HRSA’s more than 60 IT systems, with special emphasis on High Value Assets that process sensitive health data. The contractor is expected to deliver rapid detection, in-depth analysis, immediate containment, and effective remediation of cybersecurity incidents to ensure the integrity, confidentiality, and availability of critical health information. Services must be available 24/7 and aligned with federal cybersecurity standards to address evolving threats in real time. Performance is centered in Rockville, Maryland, with the work falling under the NAICS code 541611 for management, scientific, and technical consulting services. This subcontract is awarded under the Department of Health and Human Services, specifically for HRSA Headquarters, and is open to qualified providers capable of meeting stringent security requirements for handling protected health information. The solicitation was posted on May 8, 2026, and the contractor must maintain readiness to respond to incidents across the full spectrum of HRSA’s IT infrastructure, ensuring compliance and continuity of operations for a vital public health agency.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Vehicle Recompete: Fss 47QRAA22D00EAFederal Supply Schedule contract 47QRAA22D00EA is a full-recompete vehicle managed by the General Services Administration with an IDV ceiling of 3,500,000 dollars. The ordering period for this contract extends through August 30, 2027. It is not a set-aside contract and falls under NAICS code 541613. Notably, the agreement incorporates FAR clause 52.223-99 to ensure the implementation of adequate COVID-19 safety protocols for federal contractors. The contract supports various agencies, including the Department of Health and Human Services, and has been utilized by HCN Global, LLC for high-value task orders. These services include media outreach, HRSA-wide marketing, and culturally and linguistically relevant communications and marketing services for the USDA Forest Service. While the current active task order value is listed at 0 dollars, the vehicle is designed to provide a broad range of professional marketing and communication services.

Marketing Consulting Services

POSTED

DEADLINE

Vehicle Recompete: Fss 47QRAA22D00D6This Federal Supply Schedule contract, identified as 47QRAA22D00D6, is a full-recompete vehicle managed by the GSA FAS PSHC Professional Services Schedule. The contract has an IDV ceiling of 1,000,000 dollars and an ordering period that extends through July 27, 2027. It is not a set-aside contract and falls under NAICS code 541611. The agreement includes specific federal acquisition regulation clauses, such as 52.223-99, to ensure the implementation of adequate COVID-19 safety protocols. While there are currently no active task orders valued at any amount, the contract is associated with the General Services Administration and the Department of Health and Human Services, with a notable connection to coaching services provided by Enlighteneering, Inc.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Vehicle Recompete: Fss GS00F239GAThis Federal Supply Schedule contract, identified as vehicle GS00F239GA, is a full-recompete agreement managed by the General Services Administration under the Gsa/fas/pshc/prof Srvcs Sched-pss contracting office. The contract has an IDV ceiling of 168,099 dollars and is not subject to any specific set-aside restrictions. It is categorized under NAICS code 541611 for professional services and is associated with the Health Resources and Services Administration. The ordering period for this vehicle is scheduled to end on June 21, 2027. While there are currently no active task orders valued at zero dollars, the contract framework includes a parent BPA for HRSA wide marketing services involving Tunheim Acquisitions, Inc. The original solicitation for this effort was FCO00CORP0000C.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS