This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

CMMC Level 2 Compliance and Cybersecurity Support

Closed

Federal

Submission Closed07/27/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

IT Operational Audit and Systems AlignmentThe IT Operational Audit and Systems Alignment subcontract for Houston City College focuses on evaluating technology stack efficiency and ensuring IT service alignment for prime contractors. The scope of work includes auditing software licenses, assessing IT ticketing workflows, and evaluating the integration of Student Information Systems and Enterprise Resource Planning systems. These evaluations must be conducted using established COBIT or ITIL frameworks to ensure industry-standard compliance. Qualified candidates must hold CISA or ITIL certifications to be eligible for this engagement. The primary deliverables for the project are a comprehensive IT Operational Efficiency Audit and a strategic Technology Roadmap. Interested parties should note the response deadline of December 11, 2026, for this Texas-based opportunity categorized under NAICS code 541512.

POSTED

DEADLINE

Field Device Integration and Protocol EngineeringThe Field Device Integration and Protocol Engineering subcontract focuses on the technical integration of central ATMS software with physical field devices for prime contractors on Illinois Department of Transportation projects. The scope of work involves developing APIs and communication drivers to facilitate data collection from weather stations, cameras, and sensors. By utilizing NTCIP and other specialized traffic device protocols, the contractor will ensure bidirectional control and functional communication between the ATMS and various field equipment. This opportunity is categorized under NAICS code 541512 and is managed by the Illinois Finance and Administration agency. Interested parties should note that the solicitation was posted on November 6, 2026, with a response deadline set for December 21, 2026.

FINADMIN494 - Finance & Administration

POSTED

DEADLINE

Advanced Traffic Management System (ATMS) RFP

Solicitation # 26-494DOT-FINAD-B-51607

The Illinois Department of Transportation is soliciting proposals for an Advanced Traffic Management System (ATMS) under solicitation number 26-494DOT-FINAD-B-51607. The system is designed to collect data from field devices to monitor traffic, work zones, and weather conditions, while providing the ability to control devices for incident response, emergency management, and traveler information. The project supports nine geographic districts and the Central Office, utilizing a vendor-hosted solution. The resulting contract will have an initial term of ten years with no options for renewal. The evaluation process focuses on technical requirements without consideration of price, with a total of 4,205 available points split between the RFP response (2,610 points) and a product demonstration (1,595 points). Offerors must explicitly agree to all mandatory requirements to avoid disqualification. Submissions must be made electronically via BidBuy by December 21, 2026, and must include specific documentation such as pricing details, a technical response, and vendor disclosures. Security requirements include multilayered protocols such as dual authentication and cybersecurity monitoring to ensure the confidentiality and integrity of the system.

FINADMIN494 - Finance & Administration

POSTED

DEADLINE

26-111 Enterprise Asset Management System

Solicitation # 26-111

The City of Brookhaven is soliciting proposals for a GIS-centric, cloud-deployed, and mobile-enabled Enterprise Asset Management System (EAMS) to support the lifecycle management of assets across Public Works, Parks, and Facilities. The system must manage a diverse inventory, including stormwater infrastructure, paving, park buildings, and facility MEP/HVAC systems. A primary requirement is seamless integration with the City's existing ArcGIS Enterprise environment, with a strong preference for solutions that utilize the City's GIS REST Services API to maintain GIS as the authoritative data source and minimize disruptions to current architecture. The selected vendor will provide software, implementation, data migration, training, and ongoing maintenance. Proposals are evaluated based on functional fit (30%), implementation approach (15%), total cost of ownership (15%), GIS capabilities (10%), support and service (10%), security and compliance (10%), and government experience (10%). The contract is intended for the duration of the project with options for four additional twelve-month renewals. Vendors must submit their proposals via the Bonfire Portal by October 19, 2026, and must certify compliance with the Official Code of Georgia Annotated and E-Verify. Invoicing requires the use of purchase order 003019 and proof of subcontractor payment. The City maintains the right to terminate the agreement due to lack of funding.

POSTED

DEADLINE

Public Register Integration ServicesThe Public Register Integration Services subcontract involves the technical integration of Case Management Systems and Customer Portals with a Public Register for prime contractors working on Department for the Economy projects. The scope of work focuses on utilizing API development and data mapping to achieve seamless synchronization and validation between the core systems and the register, resulting in a fully functional integrated environment. To qualify for this engagement, providers must hold ISO/IEC 27001:2022 certification. The solicitation was posted on November 6, 2026, with a response deadline of December 4, 2026. This project falls under NAICS code 541512 and is managed by the Department for the Economy.

Department for the Economy

POSTED

DEADLINE

ID 6575748 - DFE – OITFET - Provision, Implementation, and Support of a Case Management System, Customer Portal and Integration with a Public Register

Solicitation # 6575748

The Department for the Economy, specifically the Office of the Industrial Tribunals and Fair Employment Tribunal, requires the provision, implementation, and support of a Case Management System, a Customer Portal, and integration with their Public Register. The scope includes the delivery of core systems and ongoing support, with options for additional service days for innovation and continuous improvement, training days, and storage. All suppliers and relevant subcontractors must hold a valid ISO/IEC27001:2022 certificate or an equivalent standard. The contract is estimated to run from January 29, 2027, to December 30, 2031, with potential extensions in a 2+2+1 year structure, possibly extending the performance period to December 30, 2036. Performance will take place in Northern Ireland. Award decisions will be based on a weighted evaluation comprising total contract price at 30 percent, effectiveness of solution at 18.20 percent, development and implementation at 17.50 percent, social value methodology at 10.50 percent, security at 9.10 percent, contract and account management at 8.40 percent, and hosting and data handling at 6.30 percent.

Department for the Economy

POSTED

DEADLINE

Platform Implementation and Technical SupportThis subcontract for Platform Implementation and Technical Support involves the technical setup, configuration, and deployment of a learning platform for prime contractors working on British Council projects in Colombia. The scope of work includes adjusting platform settings to meet specific requirements and utilizing platform administration and API tools to integrate learning materials into the digital environment. The primary objective is to deliver a fully functional platform that is configured and ready for end-user access. The project is managed by the British Council under NAICS code 541512. Interested parties should note that the notice was posted on November 6, 2026, with a response deadline set for December 2, 2026.

POSTED

DEADLINE

Detention Control Systems IntegrationThis subcontract for Detention Control Systems Integration involves the installation and configuration of core electronic security infrastructure for Volusia County Division of Corrections facility projects. The selected provider will work under prime contractors to implement Programmable Logic Controllers with Human Machine Interfaces, detention controls, and access control systems. The final deliverable is a fully operational electronic detention control system that strictly adheres to the National Electric Code and Florida Model Jail Standards. The opportunity was posted on November 6, 2026, with a response deadline of December 10, 2026. Classified under NAICS code 541512, the project is managed through the Engineering and Construction agency in Florida. Interested parties can find further details via the Volusia procurement portal.

Engineering & Construction

POSTED

DEADLINE

9-1-1 Call Handling System Integration & SupportThis subcontract focuses on the integration and support of a 9-1-1 Call Handling System for the San Francisco Department of Emergency Management. The selected provider will be responsible for the provision, installation, and ongoing maintenance of call routing and handling infrastructure, ensuring full interoperability with emergency services standards. Additionally, the contractor must deliver web services that comply with accessibility standards for people with disabilities to ensure inclusive emergency access. A critical requirement for this engagement is the maintenance of a 9-1-1 Systems and Services Contract Agreement with the California Office of Emergency Services to ensure the final system is fully operational and Cal OES-compliant. Performance will take place in San Francisco, with a response deadline set for January 9, 2027. The project falls under NAICS code 541512, emphasizing the technical nature of the systems integration and support required.

Unknown SF Department (DEM)

POSTED

DEADLINE

DEM | IT 9-1-1 Call Handling System

Solicitation # SFGOV-0000012230

The Department of Emergency Management (DEM) for the City and County of San Francisco has issued a Request for Information (RFI), solicitation number SFGOV-0000012230, to conduct an industry review regarding a 9-1-1 Call Handling System. This process is strictly voluntary and is not a Request for Proposals (RFP). The DEM is specifically seeking responses from qualified firms and parties that maintain a 9-1-1 Systems and Services Contract Agreement with the California Office of Emergency Services (Cal OES) and those who were responsive to the technical and administrative requirements of Invitation for Bid (IFB) 26-16743. The RFI was posted on November 6, 2026, with a response deadline of January 9, 2027. Because this is an information-gathering effort for an industry review, there are no formal deliverables, established evaluation factors, or pricing schedules. The solicitation includes terms and conditions in Appendix B, emphasizing that the City and County of San Francisco requires web services to be accessible to people with disabilities. Additionally, respondents are subject to indemnification and duty to defend clauses, requiring them to save the City harmless from any claims or liabilities arising from the use of data. All inquiries and submissions are managed through the DEM-PMO contact point.

Unknown SF Department (DEM)

POSTED

DEADLINE

Multimedia Storage Replacement

Solicitation # WYFRS0204

The West Yorkshire Fire and Rescue Authority is seeking a replacement for its end-of-life multimedia storage system to manage the storage, indexing, and retrieval of videos and images. The scope of work includes the provision of media storage and reader devices, as well as IT services encompassing consulting, software development, and support. While the authority has specific requirements, they are open to alternative proposals, including cloud-based solutions. This procurement is noted as being particularly suitable for small and medium-sized enterprises. The contract, identified as solicitation WYFRS0204, has an estimated total value of 170,000 GBP excluding VAT. The performance period is expected to run from March 31, 2027, to March 31, 2030, with the possibility of two one-year extensions, potentially extending the total duration to five years and one day. Proposals must be submitted in English via the designated electronic portal by December 1, 2026, at 12:00pm. Evaluation will be based on a quality questionnaire, cost, social value, and demonstrations.

West Yorkshire Fire and Rescue Authority

POSTED

about 10 hours ago

DEADLINE

in 24 days

AI Contract Overview

The contract requires comprehensive third-party assessment and support to achieve CMMC Level 2 compliance and support the implementation of NIST SP 800-171 controls for contractor information systems, ensuring full alignment with Department of Defense cybersecurity standards. The scope includes evaluating existing security practices, identifying gaps against CMMC Level 2 requirements, and delivering actionable remediation guidance to strengthen the contractor’s cyber posture across all relevant domains and controls outlined in the NIST framework. This subcontract, issued by the Defense Logistics Agency under NAICS code 541512, is focused on enabling contractors to meet the mandatory cybersecurity benchmarks mandated by the DoD for handling controlled unclassified information. The solicitation is open for responses until July 27, 2026, with no specified set-aside classification, and performance is expected to be conducted wherever the contractor’s information systems are operated, without restriction to a specific geographic location. The work will involve ongoing collaboration with the contractor team to document compliance, prepare for assessment, and maintain readiness for third-party audit execution in accordance with CMMC Accreditation Body protocols.

General Info

Third-party support to achieve CMMC Level 2 and NIST SP 800-171 compliance for DoD contractor systems.

Agency

Department Of Defense → Defense Logistics Agency

NAICS

541512 - Computer Systems Design Services

Place of Performance

USA

Set-Aside

NONE

Documents

This scope was carved out of SPE7L7-26-T-4313.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

LENS, OPTICAL INSTRU

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 14

subcontract

Response DeadlineJul 27

Deadline has passed

Submission Closed

07/27/2026, 05:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → Defense Logistics Agency

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Defense Logistics Agency

Office AddressN/A

ContactsNo contact information available

Full Description

Provide CMMC Level 2 third-party assessment and support for NIST SP 800-171 implementation to ensure contractor information systems meet DoD cybersecurity requirements.