This Subcontract opportunity from Department Of Energy was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and Controlled Unclassified Information (CUI) Protection

Closed

Federal

Submission Closed07/20/2026, 03:00:00 PM CDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

XR Training Systems IntegratorThe XR Training Systems Integrator subcontract involves the setup, configuration, and integration of virtual reality hardware and software to support training projects for the Texas Office of the Attorney General. The selected provider will work under prime contractors to execute hardware assembly, software installation, and network configuration specifically for multi-user VR environments, ensuring the delivery of a fully operational and integrated training system. Qualified candidates must possess relevant IT certifications to perform the technical requirements of the role. This opportunity is categorized under NAICS code 541512 and was posted on November 9, 2026, with a response deadline of November 24, 2026.

POSTED

DEADLINE

Cybersecurity Testing and Assurance ProviderThe United Kingdom Sports Council is seeking a Cybersecurity Testing and Assurance Provider to serve as a subcontractor for digital projects. The selected provider will perform independent security and penetration testing for prime contractors, focusing on vulnerability management, security monitoring, and the validation of Secure by Design implementations. These tasks will be executed using specialized penetration testing software and scanners to ensure the integrity of digital assets. The provider is responsible for delivering comprehensive security testing reports, remediation records, and necessary assurance evidence. Key deliverables include the creation of detailed remediation plans to address identified vulnerabilities. Interested parties must submit their responses by December 11, 2026, in accordance with the solicitation posted on November 9, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Digital development partner and content management system platform implementation

Solicitation # DIG0911

The United Kingdom Sports Council is seeking a digital development partner to design, build, migrate, and launch a new website powered by a headless Software as a Service (SaaS) content management system. The project aims to replace the existing Sitecore structure with a user-centered, secure, and accessible digital experience, with a target go-live date of September 1, 2027. The contract spans four years, with the first year focusing on implementation and the subsequent three years dedicated to ongoing support and continuous improvement. The total budgeted value for the four-year term is up to 310,000 GBP, including VAT, which covers the initial build, CMS licensing, and annual support retainers. The successful supplier must adhere to strict technical and security standards, including the UK Government Secure by Design framework, WCAG 2.2 Level AA accessibility, and ISO/IEC 27001:2022 and Cyber Essentials Plus certifications. All data must be stored and handled within the United Kingdom, with encryption required both at rest and in transit. Award evaluation is based on a 100% weighting, distributed between quality of services (40%), pricing (20%), and relevant experience and track record (20%), with additional requirements for environmental sustainability and equality, diversity, and inclusion compliance. Proposals must be submitted by December 11, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Cloud Infrastructure & Security ManagementThe Cloud Infrastructure and Security Management subcontract, issued by the Department of Defense via W6QM Micc-Fdo Ft Eustis, focuses on providing a secure cloud hosting environment and technical architecture for prime contractors supporting Department of the Army Criminal Investigation Division projects. The scope of work includes managing a cloud-hosted environment capable of high-volume data processing and cross-platform monitoring, with a primary place of performance in Quantico. To ensure the protection of sensitive investigative data, the contractor must implement government-approved security controls and maintain FedRAMP certification. This effort is categorized under NAICS code 541512, with a response deadline set for December 9, 2026. The ultimate objective is the delivery of a fully operational and secure cloud environment.

W6QM Micc-Fdo Ft Eustis

POSTED

DEADLINE

Small Business Subcontracting SupportThis subcontracting opportunity with the Department of Defense Southwest Regional Maintenance Center focuses on providing specialized IT labor and niche ServiceNow expertise to support prime contractors. The primary objective is to assist prime contractors in meeting mandatory subcontracting goals through the delivery of certified small business labor and documented participation in official subcontracting plans. Eligible providers must hold a valid SBA, HUBZone, or WOSB certification to qualify for this effort. Performance will take place in National City, California, under NAICS code 541512. The response deadline for this requirement is November 18, 2027.

Southwest Regional Maintenance Center

POSTED

DEADLINE

ServiceNow Technical Staffing / System AdministrationThis subcontract focuses on providing technical staffing and system administration for the ServiceNow platform in support of prime contractors at the Southwest Regional Maintenance Center. Based in National City, California, the project requires the delivery of qualified technical personnel to maintain and optimize platform operations for the Department of Defense. All onsite personnel must possess a Top Secret security clearance and a minimum of five years of professional IT experience. The scope of work encompasses ongoing technical administration and platform support to ensure the efficiency of ServiceNow operations at Naval Base San Diego.

Southwest Regional Maintenance Center

POSTED

DEADLINE

SATCOM Network Management & Integration ServicesThe SATCOM Network Management and Integration Services subcontract involves the integration of military and commercial satellite communications systems for prime contractors supporting NATO Communications and Information Agency projects. Based in Belgium, the scope of work focuses on developing documented interfaces and orchestration platforms that leverage open and interoperable standards to merge commercial SATCOM capabilities with existing NATO infrastructure. Technical execution requires the use of API integration tools and network management software to deliver a fully integrated SATCOM network architecture. This opportunity is categorized under NAICS code 541512 and is associated with the Bureau of Industry and Security within the Department of Commerce.

Bureau Of Industry And Security

POSTED

DEADLINE

Enterprise Next (ENX) Draft RFP

Solicitation # 80GSFC27R0018

The Enterprise Next (ENX) contract is a single-award Hybrid Indefinite Delivery Indefinite Quantity (IDIQ) acquisition managed by the NASA Goddard Space Flight Center (GSFC). The primary objective is to provide enterprise-level development, sustaining engineering, and operations for NASA's Science Data Archives. The scope focuses on modernizing capabilities, retiring legacy services, and transitioning key data infrastructure—including ingest, archive, and distribution components—into the commercial cloud to enhance scalability, reliability, and performance while reducing operational costs. The contract will have an effective ordering period of five years, with work performed both onsite at GSFC and offsite at the contractor's facilities. The acquisition utilizes a hybrid pricing structure, allowing for the issuance of both Firm-Fixed Price (FFP) and Cost-Plus-Fixed-Fee (CPFF) task orders. Source selection will be based on a tradeoff approach evaluating Mission Suitability, Cost, and Past Performance, with Mission Suitability being the most critical factor. Key requirements include a 45-day phase-in period, strict adherence to cybersecurity and privacy standards, and the submission of an Organizational Conflict of Interest (OCI) plan. Additionally, the contract mandates transparency regarding the use of Super Intelligence and Large Language Models, requiring detailed risk and impact assessments. Proposals must be submitted via the EFSS Box system, with a final RFP anticipated in January 2027 and a planned award date in June 2027.

NASA Goddard Space Flight Center

POSTED

DEADLINE

Request for Information (RFI) on Artificial Intelligence (AI) Uses for Cislunar Space Vehicle Operations

Solicitation # 110926-2

Department Of The Air Force

POSTED

DEADLINE

SOLICITATION_SERVICENOW STAFF AUGMENTATION SERVICES

Solicitation # N5523627Q0003

The Southwest Regional Maintenance Center (SWRMC) is soliciting quotations for professional technical services, specifically ServiceNow staff augmentation, to support operations at Naval Base San Diego. This procurement is being conducted as a full and open competition under NAICS code 541512 for Computer Systems Design Services. The projected period of performance begins with a base period from December 1, 2026, to March 31, 2027, followed by two optional extension periods ending November 30, 2027. The contract will be awarded to the responsible offeror based on a Lowest Price Technically Acceptable (LPTA) evaluation. Technical acceptability requires onsite personnel to possess a minimum of five years of IT experience, a Top Secret security clearance or eligibility for one, and specific certifications detailed in the Statement of Work. Additionally, offerors must provide a Small Business Subcontracting Plan. Past performance will be evaluated using the Supplier Performance Risk System. Quotes must be submitted via email to the designated points of contact by November 18, 2026, at 11:00 AM Pacific time.

Southwest Regional Maintenance Center

POSTED

DEADLINE

Solicitation # MNPS000086

Metropolitan Nashville Public Schools is seeking a qualified contractor to provide, implement, and support a centralized Computer-Aided Dispatch and incident management system. This system is intended to enhance district-wide safety and security operations across all MNPS facilities and affiliated charter schools, specifically focusing on real-time incident tracking, emergency response coordination, alarm monitoring, dispatch operations, and detailed reporting and analytics. The solicitation, identified as MNPS000086, was posted on November 6, 2026, with a response deadline of November 26, 2026. The project will be performed in Tennessee and is managed by the Metro MNPS agency, with William Christopher Mundy serving as the primary point of contact for the procurement process.

METRO_MNPS

POSTED

about 17 hours ago

DEADLINE

in about 1 month

AI Contract Overview

The contract requires the implementation and ongoing maintenance of comprehensive cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST SP 800-171 standards. This includes enforcing robust encryption protocols, strict access controls, and continuous monitoring to ensure the confidentiality, integrity, and availability of sensitive data. All subcontractors must adhere to mandated security practices and maintain an audit-ready environment that demonstrates compliance with federal cybersecurity requirements. Failure to meet these obligations will result in immediate consequences, including a mandatory one-hour reporting window for any confirmed or suspected data breach involving CUI. Performance is tied to the Oak Ridge location with the Department of Energy as the overseeing agency under the ORNL Ut-Battelle LLC-Doe Contractor. The solicitation closes on July 20, 2026, and the work falls under NAICS code 541512 for computer systems design services, indicating an emphasis on technical implementation and operational support rather than general consulting or procurement.

General Info

Implement NIST SP 800-171 cybersecurity controls for CUI at Oak Ridge under DOE, with breach reporting within one hour.

Agency

Department Of Energy → Ornl Ut-Battelle Llc-Doe Contractor

NAICS

541512 - Computer Systems Design Services

Place of Performance

Oak Ridge, TN, 37830, USA

Set-Aside

NONE

Documents

This scope was carved out of PR484559.

The full solicitation package (5 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

1000/1333 KVA 3-Phase Dry-Type Substation Transformer

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 13

subcontract

Response DeadlineJul 20

Deadline has passed

Submission Closed

07/20/2026, 03:00:00 PM CDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Energy → Ornl Ut-Battelle Llc-Doe Contractor

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Energy → Ornl Ut-Battelle Llc-Doe Contractor

Office AddressN/A

ContactsNo contact information available

Full Description

Implementation and maintenance of cybersecurity controls to protect CUI, including NIST SP 800-171 compliance, encryption, access controls, and one-hour breach reporting.