Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, July 22 at 2:00 PM EDT

Register Free →

Cybersecurity & CMMC Compliance Support

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract involves providing support services for achieving Cybersecurity Maturity Model Certification (CMMC) Level 1 or 2 compliance, focusing on the implementation of NIST SP 800-171 requirements, conducting self-assessments, and submitting Supplier Performance Risk System (SPRS) reports on behalf of the prime contractor. This subcontract is designated as a Total Small Business Set-Aside under FAR 19.5, indicating that only small businesses are eligible to compete. The work is classified under NAICS code 541512, which pertains to computer systems design services. Awarded by the Department of Defense's Navfacsyscom Atlantic, the place of performance is in Norfolk. The contract was posted on April 15, 2026, and aims to ensure that the prime contractor meets necessary cybersecurity regulations to safeguard controlled unclassified information in accordance with federal standards. The support will assist the prime contractor in maintaining compliance throughout their supply chain obligations, enhancing overall defense information security posture.

General Info

Support services for CMMC Level 1/2 compliance, NIST 800-171 implementation, small business set-aside.

Agency

Department Of Defense → Navfacsyscom AtlanticView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Norfolk, VA, USA

Set-Aside

SBA

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Navfacsyscom Atlantic
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Defense → Navfacsyscom Atlantic
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Support for CMMC Level 1 or 2 compliance, including NIST SP 800-171 implementation, self-assessment, and SPRS submission for the prime contractor.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
SLED
FIDS Software ReplacementThe Port of Seattle through ICT Enterprise Infrastructure Services is forecasting the replacement of its existing Flight Information Display System software to modernize air travel information services. The solicitation, posted on July 18, 2026, targets a software solution that will enhance the accuracy, reliability, and user experience of real-time flight data displayed across airport terminals. The North American Industry Classification System code 541512 indicates this effort is focused on custom computer programming services, suggesting the need for a tailored system rather than off-the-shelf software. The system must support seamless integration with existing airport infrastructure and meet evolving operational demands for passenger information delivery. Primary contact for the procurement is Farlis Lewis, with Krista Sadler serving as Project Manager, and inquiries may be directed via their provided phone numbers and email addresses. The contract does not specify a set-aside classification, meaning it is open to all eligible vendors without preference for small businesses or other designated categories. Though no specific location for performance is listed, the system is intended to serve the Port of Seattle’s aviation facilities, requiring any proposed solution to be deployable and supported at the airport environment. The official solicitation details can be accessed through the provided UI link for further technical and compliance requirements.
ICT Enterprise Infrastructure Services

POSTED

about 8 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
RFP 26-013 BIPIN RMS and JMS/CMS Software ReplacementThe City of Kennewick is soliciting proposals for RFP 26-013 to replace the existing Public Safety Records and Jail Management System used by the Bi-County Police Information Network, which serves law enforcement agencies across Benton and Franklin Counties in Washington. The current system, implemented in April 2022 after transitioning from Intergraph I/Leads to Tyler Public Safety, is being replaced to better meet the operational needs of the consortium. Proposals must be submitted by September 10, 2026, at 3:00 p.m., and qualified contractors are expected to deliver a comprehensive, turnkey solution that includes system installation, data migration from multiple sources, configuration, implementation, ongoing service, and long-term maintenance tailored for a multijurisdictional environment. Interested parties must register for the pre-proposal meeting on July 27, 2026, via email to the point of contact, and all official updates, addenda, and Q&A will be posted exclusively through Public Purchase, which is the only authorized source for document access and communications. The City of Kennewick retains the authority to waive minor irregularities or reject any or all submissions, and bidders are advised to rely solely on Public Purchase for official documentation, as third-party portals cannot be guaranteed to receive updates. Technical inquiries and proposal submissions should be directed to Graham Modrell at the City of Kennewick, with contact information provided for email and phone. Online support through Public Purchase is available weekdays from 7:00 a.m. to 4:00 p.m. Mountain Time, and bidders are encouraged to verify access to materials directly through the platform to avoid delays or noncompliance. All proposals must fully address the requirements outlined in the solicitation to be considered.
City of Kennewick

POSTED

about 15 hours ago

DEADLINE

in about 2 months
View Details
NAICS: 541512
New
SLED
Cisco PBX Phone System to Microsoft TeamsClean Water Services in Oregon is soliciting proposals to migrate its existing Cisco Call Manager 14.5 phone system to Microsoft Teams Phone, with a focus on modernizing voice and telecommunications infrastructure. Proposals must be submitted electronically through the Bid Locker portal by August 17, 2026, at 4:00 p.m. Pacific Time, with no exceptions accepted for late, emailed, mailed, or faxed submissions. Vendors are required to register with Bid Locker prior to submission and must monitor the portal daily for amendments, inquiries, or updates, as the District will not notify proposers individually. A voluntary pre-proposal meeting is scheduled for July 30, 2026, via Microsoft Teams, and the full Request for Proposals is accessible through the same portal and the District’s website. The solicitation, numbered 5851, is structured as a Firm Fixed Price contract with an estimated value between $350,000 and $700,000, potentially reaching $850,000 if an optional one-year renewal is exercised. Evaluation of proposals will be based on a best-value trade-off approach, weighting Approach and Methods at 40 points, Proposed Pricing at 30, and Technical at 20, with additional points allocated for Experience, Related Projects, Project Management, Completeness, Suitability, Support, and Corporate Responsibility, totaling 100 points. Proposals are limited to 15 pages excluding mandatory attachments such as the Certifications and Representations Form (Attachment B), the Cost Proposal Form (Attachment D), and the Service Level Agreement. Deliverables must include system design documentation, migration plans, security controls, and E911 solutions, with all equipment required to be Microsoft Teams Phone certified. The contractor must adhere to Oregon data protection statutes, maintain SOC-2 Type 2 certification, implement encryption and multi-factor authentication, restrict data storage to the U.S. or Canada, and guarantee high availability of at least 99.95% uptime. Special requirements include cybersecurity liability coverage between $1 million and $2 million per occurrence, insurer A.M. Best ratings of A- or higher, indemnification for data breaches, prior approval for key personnel changes, and assignment of all work product to the District. The contract will be executed after a Notice of Intent to Award and the development of a final Statement of Work, with performance to occur at the District’s locations in Oregon under F.O
Clean Water Services

POSTED

about 19 hours ago

DEADLINE

in about 1 month
View Details
NAICS: 541512
New
SLED
Transportation Demand Management SoftwarePark City Municipal Corporation is seeking qualified firms to provide Transportation Demand Management software through solicitation PCMC27007 - TRP, with proposals due by July 31, 2026. The contract, structured as a Professional Services Agreement, involves the delivery of a software solution to support transit demand management, with a base term of two years and up to three one-year option periods, for an estimated total value between $40,000 and $100,000. Evaluation of proposals will be based on a best value trade-off approach, with technical capability to meet the scope of work accounting for 40% of the score, followed by customer support (20%), cost (20%), vendor experience (10%), and value add (10%). Award will not be based solely on price, and the lowest price technically acceptable model does not apply. The vendor must comply with Utah state laws and regulations, including mandatory participation in E-Verify for services performed in the state, and must adhere to strict information security protocols such as weekly and monthly vulnerability scans, annual penetration testing, and adherence to data classification standards defined under Utah’s Government Records Access and Management Act. All deliverables created under the contract become the exclusive property of PCMC, and records must be retained for six years for audit purposes by PCMC or the State Auditor. The Service Provider is required to maintain comprehensive insurance coverage including professional liability, workers’ compensation with waiver of subrogation, and cyber liability or data breach coverage of at least $5 million per occurrence, with an additional $5 million in technology errors and omissions insurance, which may be combined with cyber liability if adequately covered. The contract mandates adherence to a standard cybersecurity agreement, prohibits unauthorized subcontracting or assignment without prior written consent, and requires that sensitive information, including personal identifiers, not be stored on personal devices. Proposals are limited to 15 pages and must be submitted electronically via the Utah Public Procurement Place portal, with separate redacted and unredacted versions required if confidentiality claims are made under GRAMA. All proposals are subject to ethical review, and firms must attest to no conflicts of interest, no contingent fees, and compliance with park city ordinance on improper influence. The contract must be executed using PCMC’s standard Professional Services Cyber Agreement with no deviations allowed unless submitted by the proposal deadline. The vendor must be authorized to conduct business in Utah and, if operating within Park City, must hold a valid municipal business license. Payment terms require invoices
Utah

POSTED

about 20 hours ago

DEADLINE

in 13 days
View Details

More opportunities from Department Of Defense → Navfacsyscom Atlantic

Same awarding agency

NAICS: 518210
New
Federal
FIRM FIXED PRICE CONTRACT FOR WEB-BASED SUBSCRIPTION SERVICES TO ASTM INTERNATIONAL NON-GOVERNMENT STANDARDSThe contract seeks qualified vendors to provide a firm-fixed price web-based subscription service for access to ASTM International’s standards and materials in electronic format, ensuring 24/7 instantaneous access for Department of Defense personnel via desktop and mobile devices. The subscription must include the complete collection of ASTM standards, encompassing all active and historical volumes and sections, delivered through a secure internet-based platform without interruption or delay. The service is intended for use by DoD employees and must support seamless, always-available retrieval of standards necessary for compliance, engineering, and operational requirements. The solicitation, identified as N6247026R0037, was posted on July 16, 2026, with responses due by July 23, 2026, and falls under NAICS code 518210 for data processing and related services. The contracting office is Navfacsyscom Atlantic within the Department of Defense, based in Norfolk, Virginia, with performance expected to occur anywhere in Virginia. Kimberly Hall serves as the primary point of contact, and while no set-aside preference is specified, vendors must be prepared to meet the firm-fixed pricing structure and deliver a fully functional, uninterrupted online subscription system compatible with modern computing environments.
Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

2 days ago

DEADLINE

in 5 days
View Details
NAICS: 333923
New
Federal
ONE (1) 150 METRIC TON MOBILE BOAT HOIST, NSWCCD, NORFOLK VAThe U.S. Navy, through Naval Facilities Engineering Systems Command Atlantic, is soliciting a single 150 metric ton mobile boat hoist for installation at Naval Station Norfolk, Virginia, under solicitation N62470-26-R-0007. This procurement is exclusively set aside for small businesses under NAICS code 333923, with a firm-fixed-price contract structure and a planned 460-day performance period from award to completion. The hoist must be engineered by a registered professional and delivered with all necessary labor, equipment, materials, and construction services required for assembly, testing, and immediate operational readiness. Offerors must be registered in the System for Award Management and comply with cybersecurity requirements under CMMC 2.0, specifically achieving at least a completed CMMC Level 1 self-assessment documented in the Supplier Performance Risk System. Compliance with DFARS clauses 252.204-7012, 252.204-7021, and 252.240-7997 is mandatory, along with adherence to NIST SP 800-171 for protecting controlled unclassified information. Technical proposals must include product literature, general arrangement drawings, and a narrative, evaluated alongside past performance and price using a best value tradeoff analysis as prescribed in FAR Part 15. Proposals must be submitted in PDF format via the PIEE portal by the deadline of August 5, 2026, and failure to meet any pass/fail gate—SAM registration or CMMC compliance—will disqualify an offeror regardless of technical or pricing merit.
Overhead Traveling Crane, Hoist, and Monorail System Manufacturing

POSTED

2 days ago

DEADLINE

in 13 days
View Details
NAICS: 238120
New
Federal
DD1 - VA CLASS PROPULSOR ENCLOSURE PHASES 1 & 2 LOCATED IN PORTSMOUTH NAVAL SHIPYARD (KITTERY, MAINE) IN SUPPORT OF THE SHIPYARD INFRASTRUCTURE OPTIMIZATION PROGRAM (SIOP)Naval Facilities Engineering Systems Command (NAVFAC) Atlantic is conducting market research through a sources sought synopsis to evaluate the availability of qualified small businesses for a potential future contract supporting infrastructure upgrades at Portsmouth Naval Shipyard in Kittery, Maine. The government is not soliciting proposals or committing to award a contract at this time, and no costs will be reimbursed for responses. The contemplated acquisition involves the fabrication and delivery of three major steel structures: a portable, modular five-story work enclosure weighing approximately 150 tons with an integrated 3-ton bridge crane and removable roof hatch; two 90-foot truss-style steel material handling bridges totaling 80 tons of fabricated steel, complete with permanent supports and integrated crane systems; and a concrete slab-on-grade storage pad for the enclosure when not in use. All steel fabrication must be performed by an AISC-certified fabricator, and delivery of all components requires barge transport. The estimated total construction cost for the project falls between $25 million and $100 million, with potential options to procure one additional work enclosure and two additional bridges without accompanying supports. The procurement will follow a Design-Bid-Build approach, and the government is considering a small business set-aside based on responses received. Interested small businesses, including SBA-certified 8(a), HUBZone, SDVOSB, WOSB, EDWOSB, and other small entities, are encouraged to respond with a capability package that includes completed contractor and project information forms and demonstrated experience on at least three relevant projects completed within the last ten years. Each project must have a final construction cost of at least $10 million, with one project exceeding $20 million. Projects must include substantial custom steel fabrication—75% by value—of atypical steel structures such as modular enclosures or relocatable assemblies, and must collectively demonstrate experience in multi-stage shop and field fabrication with barge delivery, self-performed concrete slab-on-ground construction with post-installed anchors, hot-dip galvanizing of steel components, and application of multi-part epoxy coatings. Offerors must prove they have performed these tasks as prime or subcontractor, and must show compliance with FAR 52.219-14 limitations on subcontracting if acting as a small business prime. Team arrangements, joint ventures, and 8(a) mentor-protégé agreements must be clearly detailed, including roles, qualifications, and past collaboration. Responses must be submitted electronically as a single 5MB attachment
Structural Steel and Precast Concrete Contractors

POSTED

2 days ago

DEADLINE

in 16 days
View Details
NAICS: 562910
New
Federal
Munitions Response Actions at Vieques, Puerto Rico and Other SitesThe U.S. Navy, through NAVFAC Atlantic, is conducting market research via a sources sought notice to identify qualified small businesses capable of performing munitions response actions in Vieques, Puerto Rico, and other global locations under its area of responsibility. This notice is not a solicitation, and no contract will be awarded based on responses; it is solely for planning and acquisition strategy development. The government is seeking input from Service-Disabled Veteran-Owned Small Businesses, Veteran-Owned Small Businesses, Economically Disadvantaged Women-Owned Small Businesses, Women-Owned Small Businesses, Small Disadvantaged Businesses certified under the SBA’s 8(a) program, Historically Underutilized Business Zone Small Businesses, and other small businesses, with large business submissions explicitly excluded. The intended contract, should a solicitation be issued, would be a cost-plus-award-fee, indefinite-delivery indefinite-quantity agreement with a base period and four one-year options, totaling five years, with an estimated total value of $95 million over its life. The scope of work involves the safe detection, recovery, evaluation, management, and disposal of munitions and debris in terrestrial and aquatic environments, adhering to Department of Defense explosives safety standards, DERP, CERCLA, the National Contingency Plan, and other applicable regulations. Performers must have an accounting system deemed adequate by the Defense Contract Audit Agency for cost-type contracts. The assigned NAICS code is 562910 with a small business size standard of 1,000 employees, and projects are typically valued at $10 million or more. Responses must be submitted via a mandatory capabilities questionnaire in Times New Roman, size 12, in PDF or Word format to Elizabeth Eliason-Carey by 14 August 2026. Only questionnaire responses will be reviewed, no feedback or debriefs will be provided, and submissions are at the respondent’s own expense. The government retains full rights to use submitted information without restriction and reserves the right to cancel the acquisition at any time without liability.
Remediation Services

POSTED

3 days ago

DEADLINE

in 27 days
View Details