This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and Compliance Flow-Down Support

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Inventory: All in-one inventory mgmt. software

Solicitation # EV00000992

The Oklahoma Department of Agriculture, Food, and Forestry is soliciting a comprehensive, all-in-one inventory and order management system for the Forest Regeneration Center. The selected supplier will be responsible for reviewing existing seedling inventory and sales systems to implement a tracking system that supports e-commerce, point-of-sale transactions, and automated shipping and pickup fulfillment. A key requirement is the integration of the new system with the center's existing WooCommerce online store. The supplier must also provide a specialist to assist with implementation, data migration, onboarding, and live support. Bidders must submit a firm, fixed price for the contract term via the Oklahoma Supplier Portal by November 26, 2026. Proposals will be evaluated based on the ability to meet specifications, the number of requested exceptions to state terms—which should not exceed 10%—and the provision of required Authorization to Operate (ATO) documentation. Required bid components include a cover page, company information, pricing, and various certifications, including non-collusion and insurance certificates from carriers with an A.M. Best rating of A- or better. Payment for services is set at net 45 days following customer acceptance of deliverables at the destination.

Oklahoma Department of Agriculture

POSTED

DEADLINE

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and the Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern Laboratory Information Management Services platform for the Jody Connor Limnology Center. This new system must document, track, and retain physical, chemical, and biological water quality data throughout standard laboratory procedures, including sample receipt, analysis, and quality control. A critical requirement is the implementation of a two-way connection and synchronization with the Oracle-based Environmental Monitoring Database to ensure the automated flow of completed records. The solution must be an industry-standard LIMS or similar technological approach, compatible with Zebra ZD220 TTLabel printers, and capable of managing complex sample preservation and container requirements. This Firm Fixed Price solicitation, identified as RFP 2026-093, requires strict adherence to cybersecurity standards, including NIST SP 800-171, 800-53 Moderate level controls, and 800-63. Vendors are evaluated on a weighted scoring system totaling 110 points, with significant emphasis on technical solutions, staffing qualifications, and GovRAMP or FedRAMP authorization status. The project includes deliverables such as a detailed work plan, data conversion, system installation, and staff training, with a production go-live goal for early 2028. Proposals must be submitted electronically in searchable PDF format, with price and technical volumes separated to ensure a blind technical review.

Department Of Environmental Services

POSTED

DEADLINE

Parking Enforcement Systems IntegrationThe Parking Enforcement Systems Integration subcontract involves providing technical integration services for prime contractors working on City of Surrey projects in Canada. The primary objective is to connect mobile payment applications with existing parking enforcement systems through the development of APIs and data bridges, ensuring that payment statuses are synchronized in real time for enforcement officers. The scope of work includes the execution of comprehensive test plans to verify data accuracy and the resolution of any integration defects. The successful contractor is responsible for delivering fully tested integrations along with a final test results report. This opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026.

POSTED

DEADLINE

Parking Mobile Payment App

Solicitation # 1220-030-2026-056

The City of Surrey is soliciting proposals for a Parking Mobile Payment App to maintain continuity of its current services while integrating new innovations and value-added capabilities. The scope of work includes the provision of software, configuration, integration, training, and ongoing support. Key deliverables include a detailed implementation and transition plan. The solution must adhere to strict security and privacy standards, specifically the Payment Card Industry Data Security Standard (PCI DSS) and British Columbia privacy legislation, including a mandatory Privacy Impact Assessment. Proposals will be evaluated based on the proponent's experience, reputation, resources, technical capabilities, and financial proposals, with the City reserving the right to select the most advantageous offer rather than the lowest price. Financial proposals must cover three specific transaction fee scenarios: contractor exclusivity, non-exclusivity, and end-user payment of fees. The contract includes a term that can be extended for up to four additional one-year periods. Payment terms require parking fees to be remitted by the 15th day of the following month, and the City maintains the right to terminate or reduce services if funds are not appropriated for the current fiscal year. Contractors must maintain Workers Compensation Board coverage and a safety program meeting occupational health and safety requirements. The City also retains the right to inspect personal information and management policies at the contractor's premises. Proposals must be submitted as a single PDF file to the procurement office by the deadline.

POSTED

DEADLINE

EdTech Integration for World Language MaterialsThis subcontract for EdTech Integration for World Language Materials involves providing and configuring digital infrastructure for prime contractors supporting Atlanta Public Schools. The scope of work focuses on integrating digital textbooks and language learning software into the district learning management system, configuring single sign-on accounts, and ensuring all systems are interoperable with district hardware. All technical implementations must strictly adhere to FERPA and COPPA standards to ensure student data privacy and security. The project is categorized under NAICS code 541512 and aims to deliver a fully integrated digital learning environment for K-12 World Language projects. Interested parties should note that the solicitation was posted on November 5, 2026, with a response deadline of December 7, 2026.

Atlanta Public Schools

POSTED

DEADLINE

Independent Cybersecurity AssessmentThis subcontract for Independent Cybersecurity Assessment involves performing security testing and risk assessments for prime contractors working on Texas Education Agency projects. The scope of work focuses on conducting penetration testing for data submission tools and public portals to ensure the protection of confidential information. The selected provider must possess a strong understanding of state security standards and TGC 2063 to ensure full compliance. The primary deliverables for this engagement include a Risk Assessment Report and a Penetration Test Executive Summary. Interested parties should note that the response deadline is December 8, 2026. This opportunity falls under NAICS code 541512 and is managed through the Texas state procurement system.

Texas Education Agency

POSTED

DEADLINE

Bond Transparency Database

Solicitation # 701-26-015

The Texas Education Agency (TEA) is soliciting responses for the design, development, implementation, and operation of a statewide Bond Transparency Database. This system is required by Texas Education Code §45.114 to collect, validate, and publicly display information regarding school district and open-enrollment charter school bonds, maintenance taxes, capital projects, and related elections. The solution must be interoperable with other state financial reporting systems and include a public portal for approximately 1,208 Local Education Agencies, featuring geographic and historical filters for data retrieval. The project must adhere to all state security, accessibility, and hosting standards, including TX-RAMP certification. The contract will be awarded based on a best value approach, with disqualification for vendors with a D or F score in the Vendor Performance Tracking System. Respondents must submit a technical proposal of no more than four pages, using 12-point type and avoiding bullet points, images, or footnotes. A detailed Task, Activity, Deliverable, and Budget Plan (TADBP) is required for consideration. Deliverables are subject to a strict quality threshold where ten or more production bugs may result in non-payment. The contractor must also ensure all personnel complete TEA-approved cybersecurity training and comply with various non-discrimination and safety laws, including the Americans With Disabilities Act and the Federal Occupational Safety and Health Act.

Texas Education Agency

POSTED

DEADLINE

CMMC Level 2 Compliance & Data Handling SupportThis subcontract, titled CMMC Level 2 Compliance and Data Handling Support, is issued by the Department of Defense under the DLA Weapons Support Fluid Handling Division. The project focuses on performing cybersecurity assessments for prime contractors involved in DLA aerospace projects, specifically ensuring that systems meet NIST SP 800-171 standards for the secure transmission of defense procurement data. The primary objective is to implement data protection controls for Covered Defense Information in accordance with RD002 and to conduct CMMC Level 2 self-assessments per RD004. The selected provider will be responsible for delivering a secure data handling plan and a completed CMMC Level 2 self-assessment. The work is designated under NAICS code 541512 and will be performed at Hill AFB. The solicitation was posted on November 5, 2026, with a response deadline of November 16, 2026.

DLA WEAPONS SUPPORT FLUID HANDLING DIVISION

POSTED

DEADLINE

Installation, Configuration, and Testing ServicesThis subcontract for Installation, Configuration, and Testing Services involves the physical installation, technical configuration, and operational testing of scanning systems for prime contractors on Government of Ontario projects. The scope of work includes the integration of hardware and software to deliver a fully operational scanning system, ensuring all components are properly tested and functional. The project is managed by the Public and Business Service Delivery and Procurement agency in Canada. Contractors must strictly adhere to health and safety regulations, specifically OHSA R.S.O. 1990, c.0.1, and complete mandatory health and safety awareness training as required by O. Reg. 297/13. Responses to this solicitation are due by November 23, 2026.

Public and Business Service Delivery and Procurement

POSTED

DEADLINE

Digitization Software Licensing & ImplementationThis subcontract, titled Digitization Software Licensing and Implementation, involves the provision and configuration of image processing and digitization workflow management software. The project is designed for prime contractors working on government ministry archival projects for the Government of Ontario. The scope of work includes the delivery of an installed and licensed software system featuring batch processing tools, workflow automation, quality control capabilities, and metadata functionality. The opportunity was posted on November 5, 2026, with a response deadline of November 23, 2026. Classified under NAICS code 541512, the contract is managed by the Public and Business Service Delivery and Procurement agency, with the place of performance located in Canada.

Public and Business Service Delivery and Procurement

POSTED

DEADLINE

System Testing and Quality Assurance (QA)This subcontract opportunity, titled System Testing and Quality Assurance (QA), is issued by the New Jersey Division of Purchase and Property. The selected contractor will be responsible for performing independent testing of configured solutions for prime contractors, which includes developing comprehensive test plans and User Acceptance Testing strategies. Key technical duties involve executing functional, integration, and performance testing while maintaining a Requirements Traceability Matrix to ensure all project specifications are met. Final deliverables for the engagement include a formal Test Plan, a detailed Test Report, and official UAT sign-off. The procurement is designated as an SBA set-aside specifically for Small Business Enterprises and Disabled Veteran-Owned Businesses under NAICS code 541512. Interested parties must submit their responses by the deadline of February 4, 2027. This project focuses on ensuring the quality and reliability of systems implemented within the state's infrastructure through rigorous quality assurance protocols.

Division of Purchase and Property

POSTED

about 15 hours ago

DEADLINE

in 3 months

AI Contract Overview

This contract supports cybersecurity compliance and flow-down requirements for subcontractors under Department of Defense regulations, focusing on adherence to NIST SP 800-171 standards for protecting controlled unclassified information. It includes the implementation of processes to report cyber incidents through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, ensuring timely and accurate communication of security events. The contract also mandates the proper assessment and documentation of subcontractor compliance, requiring the flow-down of DFARS clauses to ensure all tiered suppliers meet the same cybersecurity and reporting obligations as the prime contractor. The work is associated with the Defense Logistics Agency under the NAICS code 541512 for computer systems design services and is structured as a subcontract. Performance obligations extend across the entire supply chain, requiring ongoing monitoring, evaluation, and reporting mechanisms to maintain compliance. The contract emphasizes operational readiness, regulatory alignment, and accountability in handling sensitive defense information, with all activities governed by the terms of the underlying prime contract SPE60126D1522 and the delivery order SPE60126FL00Q.