NIGP 25727: Chemical, Biological, Radiological and Nuclear Explosive Weapons and Cyber Attacks

NIGP 25727 Chemical, Biological, Radiological And Nuclear Explosive Weapons And Cyber Attacks, an Item code, encompasses defensive cybersecurity services and secure software development tooling that state and local governments are actively acquiring. Recent solicitations show state and local buyers pursuing managed cybersecurity services—including penetration testing, risk assessment, incident response, and threat detection—alongside specialized application security testing platforms that integrate static and dynamic scanning, software composition analysis, and vulnerability remediation capabilities into development pipelines. The issuing bodies span city police departments, municipal IT offices, and county purchasing and technology divisions, reflecting fragmented procurement across public safety, information technology, and administrative functions within single jurisdictions.

Activity concentrates in California, where Sacramento County and the City of Santa Monica posted major cybersecurity procurements in mid-2026. Sacramento County issued RFB #2026-RFB-0064 for an Application Security Testing platform with a bid due date of July 29, 2026, requiring SAST, DAST, and SCA integration with CI/CD pipeline compatibility; the bid included a 5% local preference and 2% micro-business preference. The City of Santa Monica released an RFP for comprehensive Cybersecurity Managed Services with a proposal deadline of October 24, 2025, seeking management of approximately 8,000 devices across hybrid on-premises and cloud environments with a five-year initial term. Outside California, the Columbus Consolidated Government Police Department posted a trade-in solicitation for used and confiscated firearms in exchange for Heckler & Koch rifles, due October 14, 2026, though this opportunity—while coded under the NIGP category—represents a distinct public safety acquisition stream focused on weapons rather than cyber defense.