This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity & CMMC Compliance Support

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

SolarWinds Observability Implementation Specialist

POSTED

DEADLINE

DA10--Joint Credentialing and Privileging (C&P) Solution (VA-27-00006966)

Solicitation # 36C10B27Q0109

The Department of Veterans Affairs, through the Technology Acquisition Center NJ, has issued a Request for Information (RFI) for a Joint Credentialing and Privileging (C&P) Solution under solicitation number 36C10B27Q0109. This effort, categorized under NAICS code 541512, seeks a capability that manages credentialing and privileging processes. The solution must adhere to strict security and regulatory standards, including HIPAA compliance, Section 508 accessibility standards, and the Information Technology Disaster Recovery Plan. Additionally, the system must comply with DoD Manual 5200.01 Volume 4 regarding Controlled Unclassified Information (CUI), requiring a CUI banner on every screen. The required capability must support access via CAC or temporary 90-day credentials for non-CAC users and allow file uploads of up to 50MB in formats such as .pdf, .txt, .zip, and .msg. Interested respondents must address seven specific use cases and provide a draft Rough Order of Magnitude (ROM) cost estimate. Submissions must include detailed company information, including the Unique Entity ID, CAGE code, SAM registration status, and socioeconomic status. The primary points of contact for this effort are Contracting Officer Kimberly Geran and Contract Specialist Ryan Sehulster.

Technology Acquisition Center Nj (36C10B)

POSTED

DEADLINE

Grid Cybersecurity and Supply Chain Risk ManagementThe Grid Cybersecurity and Supply Chain Risk Management subcontract, issued by the Department of State's Bureau of European and Eurasian Affairs, focuses on securing energy grid infrastructure for prime contractors. The scope of work involves performing comprehensive cybersecurity audits, designing safeguards to mitigate malign foreign influence, and conducting grid assessments utilizing secure supply chain tracking systems. All activities must strictly adhere to established U.S. Government cybersecurity frameworks for critical infrastructure. The selected provider is responsible for delivering a detailed cybersecurity implementation plan and establishing an active monitoring system to ensure ongoing protection. This opportunity falls under NAICS code 541512, with a response deadline set for December 6, 2026.

Bureau Of European And Eurasian Affairs

POSTED

DEADLINE

Business Intelligence and Data Analytic Solutions

Solicitation # 27-12P

Solicitation 27-12P is a cooperative procurement issued by 1GPA, with Mary C. O'Brien Accommodation School/Pinal County ESA serving as the lead agency, to secure Business Intelligence and Data Analytic Solutions. The contract seeks commercially available products and platforms for data analytics, visualization, management, and decision support, including related professional services such as data governance and training. This agreement is designed to replace contract 22-04P upon its expiration on March 8, 2027, which is also the scheduled start date for the new initial one-year term. The contract allows for unilateral month-to-month extensions or mutual extensions for up to 48 months in 12-month increments. Annual usage is estimated at 1.5 million dollars, though no guaranteed quantities are provided. Eligible users include a wide range of public agencies, such as school districts, universities, and local or federal government entities. Proposals are evaluated on a point system focusing on cost, solution capabilities, experience, marketing plans, and responsiveness. Awarded contractors must adhere to strict data security and privacy regulations, including FERPA, HIPAA, and HITECH, and provide a one-year general quality warranty. Key administrative terms include Net 30 payment terms, a requirement for professional liability insurance of 1 million dollars, and compliance with various federal and state mandates, including 2 CFR 200 for federal grant funds and specific certifications regarding forced labor and the boycott of Israel.

POSTED

DEADLINE

Health Risk Assessment (HRA) & Biometric IntegrationThis subcontract focuses on the design and integration of Health Risk Assessments and biometric data for employee wellness projects within the City of Phoenix. The selected provider will work with prime contractors to implement PCP Attestation and integrate biometric data into a platform designed to generate administrative functionality and participant reporting. The project requires the delivery of a fully integrated HRA solution and biometric reporting system. Due to the nature of the health data involved, HIPAA Certification is a mandatory requirement for the performing entity. This opportunity is managed through Finance Central Procurement in Arizona, with a response deadline of December 10, 2026.

Finance Central Procurement

POSTED

DEADLINE

Wellness Platform Software Development & HostingThis subcontract for Wellness Platform Software Development and Hosting involves the creation and hosting of a secure digital wellness portal for prime contractors working on City of Phoenix employee wellness projects. The selected provider is responsible for developing and maintaining a web portal that features robust administrative capabilities while ensuring high standards of security, usability, and accessibility. Key technical responsibilities include managing the overall configuration and data management to deliver a fully functional system. To qualify for this project, the contractor must hold HIPAA Certification and successfully pass the City of Phoenix Data Privacy Risk Screening. Managed by Finance Central Procurement in Arizona under NAICS code 541512, the solicitation was posted on November 5, 2026, with a response deadline of December 10, 2026.

Finance Central Procurement

POSTED

DEADLINE

Accounts Payable (AP) Automation and EDI ServicesThis subcontract for the DeKalb County School District involves the supply and implementation of an automated accounts payable and EDI services system designed for prime contractors. The scope of work focuses on executing B2B automation software, facilitating ACH vendor payments, and providing credit card payment solutions that include rebates to ensure a functional electronic payment process. The selected provider must maintain Professional Liability Insurance with a minimum limit of 2,000,000 dollars. This project falls under NAICS code 541512, with a response deadline set for December 10, 2026.

Dekalb County School District

POSTED

DEADLINE

Inventory: All in-one inventory mgmt. software

Solicitation # EV00000992

The Oklahoma Department of Agriculture, Food, and Forestry is soliciting a comprehensive, all-in-one inventory and order management system for the Forest Regeneration Center. The selected supplier will be responsible for reviewing existing seedling inventory and sales systems to implement a tracking system that supports e-commerce, point-of-sale transactions, and automated shipping and pickup fulfillment. A key requirement is the integration of the new system with the center's existing WooCommerce online store. The supplier must also provide a specialist to assist with implementation, data migration, onboarding, and live support. Bidders must submit a firm, fixed price for the contract term via the Oklahoma Supplier Portal by November 26, 2026. Proposals will be evaluated based on the ability to meet specifications, the number of requested exceptions to state terms—which should not exceed 10%—and the provision of required Authorization to Operate (ATO) documentation. Required bid components include a cover page, company information, pricing, and various certifications, including non-collusion and insurance certificates from carriers with an A.M. Best rating of A- or better. Payment for services is set at net 45 days following customer acceptance of deliverables at the destination.

Oklahoma Department of Agriculture

POSTED

DEADLINE

ECG Data Transmission and Integration ServicesThe ECG Data Transmission and Integration Services subcontract involves the setup and configuration of secure transmission systems for prime contractors working on County medical equipment projects. The scope of work focuses on configuring the secure transmission of ECG studies, integrating data acquisition hardware with result access systems, and implementing clinical workflow interfaces. All deliverables must adhere to healthcare data standards and maintain strict HIPAA compliance to ensure a functional and secure data transmission pipeline for ECG results. This opportunity is associated with the Health - SMMC agency in California under NAICS code 541512. The project was posted on November 5, 2026, with a response deadline of December 2, 2026. Interested parties can find further details through the provided procurement portal link.

POSTED

DEADLINE

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and the Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern Laboratory Information Management Services platform for the Jody Connor Limnology Center. This new system must document, track, and retain physical, chemical, and biological water quality data throughout standard laboratory procedures, including sample receipt, analysis, and quality control. A critical requirement is the implementation of a two-way connection and synchronization with the Oracle-based Environmental Monitoring Database to ensure the automated flow of completed records. The solution must be an industry-standard LIMS or similar technological approach, compatible with Zebra ZD220 TTLabel printers, and capable of managing complex sample preservation and container requirements. This Firm Fixed Price solicitation, identified as RFP 2026-093, requires strict adherence to cybersecurity standards, including NIST SP 800-171, 800-53 Moderate level controls, and 800-63. Vendors are evaluated on a weighted scoring system totaling 110 points, with significant emphasis on technical solutions, staffing qualifications, and GovRAMP or FedRAMP authorization status. The project includes deliverables such as a detailed work plan, data conversion, system installation, and staff training, with a production go-live goal for early 2028. Proposals must be submitted electronically in searchable PDF format, with price and technical volumes separated to ensure a blind technical review.

Department Of Environmental Services

POSTED

DEADLINE

Parking Enforcement Systems IntegrationThe Parking Enforcement Systems Integration subcontract involves providing technical integration services for prime contractors working on City of Surrey projects in Canada. The primary objective is to connect mobile payment applications with existing parking enforcement systems through the development of APIs and data bridges, ensuring that payment statuses are synchronized in real time for enforcement officers. The scope of work includes the execution of comprehensive test plans to verify data accuracy and the resolution of any integration defects. The successful contractor is responsible for delivering fully tested integrations along with a final test results report. This opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026.

City of Surrey

POSTED

about 24 hours ago

DEADLINE

in 13 days

AI Contract Overview

This contract provides specialized cybersecurity support to help organizations achieve CMMC Level 2 compliance by implementing the NIST SP 800-171 security controls required under DFARS 252.204-7012. The work focuses on guiding contractors through the self-assessment process, identifying gaps in current cybersecurity practices, and executing targeted remediation steps to meet federal defense information protection standards. Services include documentation development, policy alignment, technical control implementation, and readiness preparation for third-party CMMC assessments. The contract is structured as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. It aims to support defense contractors and subcontractors in fulfilling their contractual obligations to protect controlled unclassified information. Though the place of performance and point of contact details are unspecified, the work is expected to be performed remotely or on-site as needed to meet the unique needs of each client. The contract was posted on July 14, 2026, and is accessible via the DIBBS platform under award number SPE7L126P9040.