This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and Covered Defense Information (CDI) Safeguarding

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Cybersecurity Testing and Assurance Provider

The United Kingdom Sports Council

POSTED

DEADLINE

Digital development partner and content management system platform implementation

Solicitation # DIG0911

The United Kingdom Sports Council is seeking a digital development partner to design, build, migrate, and launch a new website powered by a headless Software as a Service (SaaS) content management system. The project aims to replace the existing Sitecore structure with a user-centered, secure, and accessible digital experience, with a target go-live date of September 1, 2027. The contract spans four years, with the first year focusing on implementation and the subsequent three years dedicated to ongoing support and continuous improvement. The total budgeted value for the four-year term is up to 310,000 GBP, including VAT, which covers the initial build, CMS licensing, and annual support retainers. The successful supplier must adhere to strict technical and security standards, including the UK Government Secure by Design framework, WCAG 2.2 Level AA accessibility, and ISO/IEC 27001:2022 and Cyber Essentials Plus certifications. All data must be stored and handled within the United Kingdom, with encryption required both at rest and in transit. Award evaluation is based on a 100% weighting, distributed between quality of services (40%), pricing (20%), and relevant experience and track record (20%), with additional requirements for environmental sustainability and equality, diversity, and inclusion compliance. Proposals must be submitted by December 11, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Solicitation # MNPS000086

Metropolitan Nashville Public Schools is seeking a qualified contractor to provide, implement, and support a centralized Computer-Aided Dispatch and incident management system. This system is intended to enhance district-wide safety and security operations across all MNPS facilities and affiliated charter schools, specifically focusing on real-time incident tracking, emergency response coordination, alarm monitoring, dispatch operations, and detailed reporting and analytics. The solicitation, identified as MNPS000086, was posted on November 6, 2026, with a response deadline of November 26, 2026. The project will be performed in Tennessee and is managed by the Metro MNPS agency, with William Christopher Mundy serving as the primary point of contact for the procurement process.

POSTED

DEADLINE

High-Performance Computing (HPC) Infrastructure Support

State University of New York (SUNY)

POSTED

DEADLINE

Financial Data Migration Services

State University of New York (SUNY)

POSTED

DEADLINE

Traffic Data Systems Implementation and Integration ServicesThe Traffic Data Systems Implementation and Integration Services subcontract involves providing specialized technical setup and data migration for prime contractors working on SaaS projects for the Maine Department of Transportation. The scope of work focuses on configuring a platform for traffic monitoring, migrating historical data from legacy systems, and ensuring seamless integration with existing workflows through rigorous deployment testing. In addition to the technical implementation, the contractor is responsible for delivering a fully configured and tested production environment and providing comprehensive staff training on system administration. This project falls under NAICS code 541512 and is managed by the State of Maine's Department of Transportation.

POSTED

DEADLINE

Cloud and API System Integration Development

POSTED

DEADLINE

Solicitation # SPE8EN-27-T-0359

Solicitation SPE8EN-27-T-0359 is a federal procurement issued by the Defense Logistics Agency for one digital computer system, specifically NSN 7010-01-696-9054, part number FZ-55JZ-0FBM from Panasonic Corporation of North America. The requirement specifies a delivery timeline of five days after the award, with the place of performance located in SE Washington. The contract is governed by the DLA Master Solicitation for Automated Simplified Acquisitions and requires the use of the Wide Area WorkFlow system for all electronic payment requests and receiving reports. The procurement includes stringent technical and security requirements, including CMMC Level 2 certification via a Certified Third-Party Assessment Organization and compliance with NIST SP 800-171. Technical data is subject to export controls under ITAR or EAR, requiring contractors to have approved US/Canada Joint Certification Program certification. Packaging must adhere to ASTM D3951 and MIL-STD-129, with DLA Master List requirements taking precedence. Inspection and acceptance are set for destination, and all quotes must be submitted through the DLA Internet Bid Board System.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

NA-IM Governance and Oversight (G&O)The NA-IM Governance and Oversight contract is a forecast opportunity issued by the National Nuclear Security Administration under the Department of Energy. This requirement is designated as a small business set-aside under NAICS code 541512, focusing on computer systems design services. The performance of the contract is expected to take place in the District of Columbia. VMD Systems Integrators, Inc. is listed as the incumbent contractor for these services. Interested parties may coordinate with Chelsea Murphy, the Small Business Program Manager, regarding this procurement action.

National Nuclear Security Administration

POSTED

DEADLINE

Budget Execution Formulation Analysis Support Tool (BEFAST)The Budget Execution Formulation Analysis Support Tool (BEFAST) is a forecast procurement opportunity issued by the Department of Energy's Office of Science. This project, categorized under NAICS code 541512 for computer systems design services, is intended to be performed in Maryland. The current incumbent contractor for these services is Deloitte Consulting LLP. Administrative oversight for this requirement is managed by Small Business Program Managers David Riley and Chadsey Kittock. The forecast was posted on November 8, 2026, and is listed as an other type of set-aside.

POSTED

DEADLINE

Senior ABAP DeveloperThe Department of Justice, specifically Federal Prison Industries, is forecasting a requirement for a Senior ABAP Developer to provide specialized SAP services. This opportunity is designated as a Small Business Total Set-aside under NAICS code 541512. The work is expected to be performed in Washington, District of Columbia. The current incumbent contractor for these services is SapTech Solutions. Interested parties can coordinate with David Marshall or Small Business Specialist Robert L. Connolly for further information regarding this upcoming procurement.

Inc Federal Prison Industries

POSTED

1 day ago

DEADLINE

N/A

AI Contract Overview

This contract requires strict adherence to the cybersecurity standards outlined in DFARS 252.204-7012 for the protection of Covered Defense Information, mandating full compliance with the National Institute of Standards and Technology Special Publication 800-171. The subcontractor must implement a comprehensive set of security controls to safeguard sensitive information processed, stored, or transmitted on their systems, ensuring alignment with federal cybersecurity requirements for defense contractors. All systems handling Covered Defense Information must be configured to prevent unauthorized access, detect potential breaches, and maintain audit trails to support accountability and forensic analysis. The subcontractor is obligated to report any cybersecurity incidents involving Covered Defense Information within 72 hours of discovery to the Department of Defense, providing detailed information on the nature, scope, and impact of the incident. This includes preserving and protecting all forensic evidence and cooperating fully with any subsequent government investigation. The work under this subcontract falls under NAICS code 541512, indicating it involves computer systems design services for the Defense Logistics Agency, and performance is tied to Department of Defense operations, requiring continuous vigilance and proactive mitigation of cyber threats throughout the contract lifecycle.