This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

CMMC Level 2 Cybersecurity Compliance Support

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

XR Training Systems Integrator

POSTED

DEADLINE

Cybersecurity Testing and Assurance ProviderThe United Kingdom Sports Council is seeking a Cybersecurity Testing and Assurance Provider to serve as a subcontractor for digital projects. The selected provider will perform independent security and penetration testing for prime contractors, focusing on vulnerability management, security monitoring, and the validation of Secure by Design implementations. These tasks will be executed using specialized penetration testing software and scanners to ensure the integrity of digital assets. The provider is responsible for delivering comprehensive security testing reports, remediation records, and necessary assurance evidence. Key deliverables include the creation of detailed remediation plans to address identified vulnerabilities. Interested parties must submit their responses by December 11, 2026, in accordance with the solicitation posted on November 9, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Digital development partner and content management system platform implementation

Solicitation # DIG0911

The United Kingdom Sports Council is seeking a digital development partner to design, build, migrate, and launch a new website powered by a headless Software as a Service (SaaS) content management system. The project aims to replace the existing Sitecore structure with a user-centered, secure, and accessible digital experience, with a target go-live date of September 1, 2027. The contract spans four years, with the first year focusing on implementation and the subsequent three years dedicated to ongoing support and continuous improvement. The total budgeted value for the four-year term is up to 310,000 GBP, including VAT, which covers the initial build, CMS licensing, and annual support retainers. The successful supplier must adhere to strict technical and security standards, including the UK Government Secure by Design framework, WCAG 2.2 Level AA accessibility, and ISO/IEC 27001:2022 and Cyber Essentials Plus certifications. All data must be stored and handled within the United Kingdom, with encryption required both at rest and in transit. Award evaluation is based on a 100% weighting, distributed between quality of services (40%), pricing (20%), and relevant experience and track record (20%), with additional requirements for environmental sustainability and equality, diversity, and inclusion compliance. Proposals must be submitted by December 11, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Cloud Infrastructure & Security Management

W6QM Micc-Fdo Ft Eustis

POSTED

DEADLINE

Small Business Subcontracting Support

Southwest Regional Maintenance Center

POSTED

DEADLINE

ServiceNow Technical Staffing / System Administration

Southwest Regional Maintenance Center

POSTED

DEADLINE

Request for Information (RFI) on Artificial Intelligence (AI) Uses for Cislunar Space Vehicle Operations

Solicitation # 110926-2

Department Of The Air Force

POSTED

DEADLINE

SOLICITATION_SERVICENOW STAFF AUGMENTATION SERVICES

Solicitation # N5523627Q0003

The Southwest Regional Maintenance Center (SWRMC) is soliciting quotations for professional technical services, specifically ServiceNow staff augmentation, to support operations at Naval Base San Diego. This procurement is being conducted as a full and open competition under NAICS code 541512 for Computer Systems Design Services. The projected period of performance begins with a base period from December 1, 2026, to March 31, 2027, followed by two optional extension periods ending November 30, 2027. The contract will be awarded to the responsible offeror based on a Lowest Price Technically Acceptable (LPTA) evaluation. Technical acceptability requires onsite personnel to possess a minimum of five years of IT experience, a Top Secret security clearance or eligibility for one, and specific certifications detailed in the Statement of Work. Additionally, offerors must provide a Small Business Subcontracting Plan. Past performance will be evaluated using the Supplier Performance Risk System. Quotes must be submitted via email to the designated points of contact by November 18, 2026, at 11:00 AM Pacific time.

Southwest Regional Maintenance Center

POSTED

DEADLINE

Solicitation # MNPS000086

Metropolitan Nashville Public Schools is seeking a qualified contractor to provide, implement, and support a centralized Computer-Aided Dispatch and incident management system. This system is intended to enhance district-wide safety and security operations across all MNPS facilities and affiliated charter schools, specifically focusing on real-time incident tracking, emergency response coordination, alarm monitoring, dispatch operations, and detailed reporting and analytics. The solicitation, identified as MNPS000086, was posted on November 6, 2026, with a response deadline of November 26, 2026. The project will be performed in Tennessee and is managed by the Metro MNPS agency, with William Christopher Mundy serving as the primary point of contact for the procurement process.

POSTED

DEADLINE

AI Performance Testing & Validation Services

Department of Environmental Quality

POSTED

DEADLINE

Web-Based AI Interface & Integration Development

Department of Environmental Quality

POSTED

about 16 hours ago

DEADLINE

in about 2 months

AI Contract Overview

The contract supports the achievement and maintenance of CMMC Level 2 compliance through comprehensive consulting and implementation services focused on enforcing NIST SP 800-171 security controls, establishing robust audit logging capabilities, and executing system hardening measures across relevant information systems. These services are designed to ensure Defense Logistics Agency subcontractors meet the mandatory cybersecurity requirements necessary to handle controlled unclassified information within the defense supply chain. The work is performed as a subcontract under the Department of Defense and aligns with NAICS code 541512 for computer systems design services, targeting organizations that must demonstrate verifiable compliance with federal cybersecurity standards. Implementation spans technical, procedural, and administrative domains to build a resilient and auditable security posture compliant with CMMC Level 2 expectations.

General Info

CMMC Level 2 compliance via NIST SP 800-171 controls, audit logging, and system hardening for DoD subcontractors.

Agency

Department Of Defense → Defense Logistics Agency

NAICS

541512 - Computer Systems Design Services

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of SPE7MC-26-T-023R.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

PARTS KIT, BALL VALV

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 13

subcontract

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → Defense Logistics Agency

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Defense Logistics Agency

Office AddressN/A

ContactsNo contact information available

Full Description

Consulting and implementation services to achieve and maintain CMMC Level 2 compliance, including NIST SP 800-171 controls, audit logging, and system hardening.