This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Controlled Unclassified Information (CUI) Cybersecurity Compliance

Closed

Federal

Submission Closed07/24/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

XR Training Systems IntegratorThe XR Training Systems Integrator subcontract involves the setup, configuration, and integration of virtual reality hardware and software to support training projects for the Texas Office of the Attorney General. The selected provider will work under prime contractors to execute hardware assembly, software installation, and network configuration specifically for multi-user VR environments, ensuring the delivery of a fully operational and integrated training system. Qualified candidates must possess relevant IT certifications to perform the technical requirements of the role. This opportunity is categorized under NAICS code 541512 and was posted on November 9, 2026, with a response deadline of November 24, 2026.

POSTED

DEADLINE

Cybersecurity Testing and Assurance ProviderThe United Kingdom Sports Council is seeking a Cybersecurity Testing and Assurance Provider to serve as a subcontractor for digital projects. The selected provider will perform independent security and penetration testing for prime contractors, focusing on vulnerability management, security monitoring, and the validation of Secure by Design implementations. These tasks will be executed using specialized penetration testing software and scanners to ensure the integrity of digital assets. The provider is responsible for delivering comprehensive security testing reports, remediation records, and necessary assurance evidence. Key deliverables include the creation of detailed remediation plans to address identified vulnerabilities. Interested parties must submit their responses by December 11, 2026, in accordance with the solicitation posted on November 9, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Digital development partner and content management system platform implementation

Solicitation # DIG0911

The United Kingdom Sports Council is seeking a digital development partner to design, build, migrate, and launch a new website powered by a headless Software as a Service (SaaS) content management system. The project aims to replace the existing Sitecore structure with a user-centered, secure, and accessible digital experience, with a target go-live date of September 1, 2027. The contract spans four years, with the first year focusing on implementation and the subsequent three years dedicated to ongoing support and continuous improvement. The total budgeted value for the four-year term is up to 310,000 GBP, including VAT, which covers the initial build, CMS licensing, and annual support retainers. The successful supplier must adhere to strict technical and security standards, including the UK Government Secure by Design framework, WCAG 2.2 Level AA accessibility, and ISO/IEC 27001:2022 and Cyber Essentials Plus certifications. All data must be stored and handled within the United Kingdom, with encryption required both at rest and in transit. Award evaluation is based on a 100% weighting, distributed between quality of services (40%), pricing (20%), and relevant experience and track record (20%), with additional requirements for environmental sustainability and equality, diversity, and inclusion compliance. Proposals must be submitted by December 11, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Cloud Infrastructure & Security ManagementThe Cloud Infrastructure and Security Management subcontract, issued by the Department of Defense via W6QM Micc-Fdo Ft Eustis, focuses on providing a secure cloud hosting environment and technical architecture for prime contractors supporting Department of the Army Criminal Investigation Division projects. The scope of work includes managing a cloud-hosted environment capable of high-volume data processing and cross-platform monitoring, with a primary place of performance in Quantico. To ensure the protection of sensitive investigative data, the contractor must implement government-approved security controls and maintain FedRAMP certification. This effort is categorized under NAICS code 541512, with a response deadline set for December 9, 2026. The ultimate objective is the delivery of a fully operational and secure cloud environment.

W6QM Micc-Fdo Ft Eustis

POSTED

DEADLINE

Small Business Subcontracting SupportThis subcontracting opportunity with the Department of Defense Southwest Regional Maintenance Center focuses on providing specialized IT labor and niche ServiceNow expertise to support prime contractors. The primary objective is to assist prime contractors in meeting mandatory subcontracting goals through the delivery of certified small business labor and documented participation in official subcontracting plans. Eligible providers must hold a valid SBA, HUBZone, or WOSB certification to qualify for this effort. Performance will take place in National City, California, under NAICS code 541512. The response deadline for this requirement is November 18, 2027.

Southwest Regional Maintenance Center

POSTED

DEADLINE

ServiceNow Technical Staffing / System AdministrationThis subcontract focuses on providing technical staffing and system administration for the ServiceNow platform in support of prime contractors at the Southwest Regional Maintenance Center. Based in National City, California, the project requires the delivery of qualified technical personnel to maintain and optimize platform operations for the Department of Defense. All onsite personnel must possess a Top Secret security clearance and a minimum of five years of professional IT experience. The scope of work encompasses ongoing technical administration and platform support to ensure the efficiency of ServiceNow operations at Naval Base San Diego.

Southwest Regional Maintenance Center

POSTED

DEADLINE

SATCOM Network Management & Integration ServicesThe SATCOM Network Management and Integration Services subcontract involves the integration of military and commercial satellite communications systems for prime contractors supporting NATO Communications and Information Agency projects. Based in Belgium, the scope of work focuses on developing documented interfaces and orchestration platforms that leverage open and interoperable standards to merge commercial SATCOM capabilities with existing NATO infrastructure. Technical execution requires the use of API integration tools and network management software to deliver a fully integrated SATCOM network architecture. This opportunity is categorized under NAICS code 541512 and is associated with the Bureau of Industry and Security within the Department of Commerce.

Bureau Of Industry And Security

POSTED

DEADLINE

Enterprise Next (ENX) Draft RFP

Solicitation # 80GSFC27R0018

The Enterprise Next (ENX) contract is a single-award Hybrid Indefinite Delivery Indefinite Quantity (IDIQ) acquisition managed by the NASA Goddard Space Flight Center (GSFC). The primary objective is to provide enterprise-level development, sustaining engineering, and operations for NASA's Science Data Archives. The scope focuses on modernizing capabilities, retiring legacy services, and transitioning key data infrastructure—including ingest, archive, and distribution components—into the commercial cloud to enhance scalability, reliability, and performance while reducing operational costs. The contract will have an effective ordering period of five years, with work performed both onsite at GSFC and offsite at the contractor's facilities. The acquisition utilizes a hybrid pricing structure, allowing for the issuance of both Firm-Fixed Price (FFP) and Cost-Plus-Fixed-Fee (CPFF) task orders. Source selection will be based on a tradeoff approach evaluating Mission Suitability, Cost, and Past Performance, with Mission Suitability being the most critical factor. Key requirements include a 45-day phase-in period, strict adherence to cybersecurity and privacy standards, and the submission of an Organizational Conflict of Interest (OCI) plan. Additionally, the contract mandates transparency regarding the use of Super Intelligence and Large Language Models, requiring detailed risk and impact assessments. Proposals must be submitted via the EFSS Box system, with a final RFP anticipated in January 2027 and a planned award date in June 2027.

NASA Goddard Space Flight Center

POSTED

DEADLINE

Request for Information (RFI) on Artificial Intelligence (AI) Uses for Cislunar Space Vehicle Operations

Solicitation # 110926-2

Department Of The Air Force

POSTED

DEADLINE

SOLICITATION_SERVICENOW STAFF AUGMENTATION SERVICES

Solicitation # N5523627Q0003

The Southwest Regional Maintenance Center (SWRMC) is soliciting quotations for professional technical services, specifically ServiceNow staff augmentation, to support operations at Naval Base San Diego. This procurement is being conducted as a full and open competition under NAICS code 541512 for Computer Systems Design Services. The projected period of performance begins with a base period from December 1, 2026, to March 31, 2027, followed by two optional extension periods ending November 30, 2027. The contract will be awarded to the responsible offeror based on a Lowest Price Technically Acceptable (LPTA) evaluation. Technical acceptability requires onsite personnel to possess a minimum of five years of IT experience, a Top Secret security clearance or eligibility for one, and specific certifications detailed in the Statement of Work. Additionally, offerors must provide a Small Business Subcontracting Plan. Past performance will be evaluated using the Supplier Performance Risk System. Quotes must be submitted via email to the designated points of contact by November 18, 2026, at 11:00 AM Pacific time.

Southwest Regional Maintenance Center

POSTED

DEADLINE

Solicitation # MNPS000086

Metropolitan Nashville Public Schools is seeking a qualified contractor to provide, implement, and support a centralized Computer-Aided Dispatch and incident management system. This system is intended to enhance district-wide safety and security operations across all MNPS facilities and affiliated charter schools, specifically focusing on real-time incident tracking, emergency response coordination, alarm monitoring, dispatch operations, and detailed reporting and analytics. The solicitation, identified as MNPS000086, was posted on November 6, 2026, with a response deadline of November 26, 2026. The project will be performed in Tennessee and is managed by the Metro MNPS agency, with William Christopher Mundy serving as the primary point of contact for the procurement process.

METRO_MNPS

POSTED

about 16 hours ago

DEADLINE

in about 1 month

AI Contract Overview

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 security controls and DFARS 252.204-7012 compliance for any system that handles Covered Defense Information. This includes establishing, documenting, and sustaining a robust cybersecurity posture aligned with federal requirements to protect Controlled Unclassified Information throughout its lifecycle. All technical, administrative, and physical safeguards mandated by these standards must be actively managed and continuously monitored to ensure adherence and avoid noncompliance penalties. This subcontract falls under NAICS code 541512 and is issued by the Department of Defense through the Land Supply Chain organization. The response deadline is July 24, 2026, with the solicitation posted on July 13, 2026. Performance is expected to support defense-related systems wherever the contractor’s operations are conducted, with no geographic restrictions specified. Compliance is mandatory and must be demonstrated as a condition of contract execution, with ongoing accountability for security posture, incident response, and audit readiness.