Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Cybersecurity & Covered Defense Information Safeguarding

Closed
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512
New
SLED
Cybersecurity Maturity Model Certification (CMMC) Program Services
Solicitation # 09112026
The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.
University of Arkansas Fayetteville (UAF)

POSTED

about 1 hour ago

DEADLINE

N/A
NAICS: 541512
New
International
Digital development partner and content management system platform implementation
Solicitation # DIG0911
The United Kingdom Sports Council is seeking a digital development partner to design, build, migrate, and launch a new website powered by a headless Software as a Service (SaaS) content management system. The project aims to replace the existing Sitecore structure with a user-centered, secure, and accessible digital experience, with a target go-live date of September 1, 2027. The contract spans four years, with the first year focusing on implementation and the subsequent three years dedicated to ongoing support and continuous improvement. The total budgeted value for the four-year term is up to 310,000 GBP, including VAT, which covers the initial build, CMS licensing, and annual support retainers. The successful supplier must adhere to strict technical and security standards, including the UK Government Secure by Design framework, WCAG 2.2 Level AA accessibility, and ISO/IEC 27001:2022 and Cyber Essentials Plus certifications. All data must be stored and handled within the United Kingdom, with encryption required both at rest and in transit. Award evaluation is based on a 100% weighting, distributed between quality of services (40%), pricing (20%), and relevant experience and track record (20%), with additional requirements for environmental sustainability and equality, diversity, and inclusion compliance. Proposals must be submitted by December 11, 2026.
The United Kingdom Sports Council

POSTED

about 5 hours ago

DEADLINE

in about 1 month

AI Contract Overview

Show more

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. A critical obligation under this agreement is the prompt reporting of any cyber incident to the appropriate authorities within 72 hours, as mandated by DFARS 252.204-7012, to support timely response and mitigation of threats to national defense systems. The work is categorized as a subcontract under NAICS code 541512, indicating it involves computer systems design and related services, with performance expected to occur at Robins Air Force Base, Georgia, under the oversight of the Department of Defense’s Electrical Devices Division. Respondents must submit proposals by the deadline of July 24, 2026, and are expected to demonstrate proven capability in executing and sustaining NIST 800-171 compliance frameworks within a defense contracting environment.

General Info

Implement and maintain NIST 800-171 controls, report cyber incidents within 72 hours at Robins AFB under DOD oversight.

NAICS

541512 - Computer Systems Design Services

Place of Performance

ROBINS A F B, GA, 31098-1887, USA

Set-Aside

NONE

Documents

This scope was carved out of SPE7M8-26-T-5389.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

SWITCH, THERMOSTATIC

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed
Posted

subcontract

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → ELECTRICAL DEVICES DIV
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implementation and maintenance of NIST SP 800-171 controls to protect covered defense information, including cyber incident reporting within 72 hours as required by DFARS 252.204-7012.

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS