This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and CUI Compliance

Closed

Federal

Submission Closed07/22/2026, 11:00:00 AM MDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern Laboratory Information Management Services platform for the Jody Connor Limnology Center. This new system will manage the documentation, tracking, and retention of physical, chemical, and biological water quality sample data, ensuring an automated data flow into the Oracle-based Environmental Monitoring Database. Key functional requirements include the ability to generate specific sample label stickers compatible with Zebra ZD220 TT printers and the capacity to track various container preservation requirements. The project is structured as a Firm Fixed Price contract with a production go-live goal for early 2028 and a potential term extension of up to three years. The procurement process involves a multi-stage evaluation based on a maximum of 110 points, combining technical and price proposals, and is not a low-bid award. Proposals must pass an initial cybersecurity screening and meet a minimum technical score of 50 points to be considered. Technical requirements include compliance with NIST SP 800-171, 800-53 Moderate level controls, and 800-63 guidelines, as well as WCAG 2.1 Level AA accessibility standards. The successful vendor will be responsible for end-to-end delivery, including infrastructure planning, data conversion, and comprehensive testing, with final acceptance based on functional performance, security, and the accuracy of data imports and exports.

Department Of Environmental Services

POSTED

DEADLINE

Installation, Configuration, and Testing ServicesThis subcontract for Installation, Configuration, and Testing Services involves the physical installation, technical configuration, and operational testing of scanning systems for prime contractors on Government of Ontario projects. The scope of work includes the integration of hardware and software to deliver a fully operational scanning system, ensuring all components are properly tested and functional. The project is managed by the Public and Business Service Delivery and Procurement agency in Canada. Contractors must strictly adhere to health and safety regulations, specifically OHSA R.S.O. 1990, c.0.1, and complete mandatory health and safety awareness training as required by O. Reg. 297/13. Responses to this solicitation are due by November 23, 2026.

Public and Business Service Delivery and Procurement

POSTED

DEADLINE

Digitization Software Licensing & ImplementationThis subcontract, titled Digitization Software Licensing and Implementation, involves the provision and configuration of image processing and digitization workflow management software. The project is designed for prime contractors working on government ministry archival projects for the Government of Ontario. The scope of work includes the delivery of an installed and licensed software system featuring batch processing tools, workflow automation, quality control capabilities, and metadata functionality. The opportunity was posted on November 5, 2026, with a response deadline of November 23, 2026. Classified under NAICS code 541512, the contract is managed by the Public and Business Service Delivery and Procurement agency, with the place of performance located in Canada.

Public and Business Service Delivery and Procurement

POSTED

DEADLINE

System Testing and Quality Assurance (QA)This subcontract opportunity, titled System Testing and Quality Assurance (QA), is issued by the New Jersey Division of Purchase and Property. The selected contractor will be responsible for performing independent testing of configured solutions for prime contractors, which includes developing comprehensive test plans and User Acceptance Testing strategies. Key technical duties involve executing functional, integration, and performance testing while maintaining a Requirements Traceability Matrix to ensure all project specifications are met. Final deliverables for the engagement include a formal Test Plan, a detailed Test Report, and official UAT sign-off. The procurement is designated as an SBA set-aside specifically for Small Business Enterprises and Disabled Veteran-Owned Businesses under NAICS code 541512. Interested parties must submit their responses by the deadline of February 4, 2027. This project focuses on ensuring the quality and reliability of systems implemented within the state's infrastructure through rigorous quality assurance protocols.

Division of Purchase and Property

POSTED

DEADLINE

Third-Party Interface and API IntegrationThis subcontract opportunity, titled Third-Party Interface and API Integration, is issued by the New Jersey Division of Purchase and Property. The project focuses on developing technical interfaces between case management systems and external state and federal systems for prime contractors. Key technical requirements include implementing real-time API or batch transfers for CASAS, TABE, and AWARE, while ensuring full compatibility with USDOL PIRL and WIPS schema formats. The successful contractor will be responsible for delivering functional system interfaces and comprehensive Interface Control Documents. The solicitation is designated as an SBA set-aside specifically for Small Business Enterprises and Disabled Veteran-Owned Businesses under NAICS code 541512. The posting date is November 5, 2026, with a response deadline of February 4, 2027. Interested parties can find further details through the New Jersey Start portal.

Division of Purchase and Property

POSTED

DEADLINE

Data Cleansing, Conversion, and MigrationThis subcontract opportunity, titled Data Cleansing, Conversion, and Migration, is issued by the New Jersey Division of Purchase and Property. The project focuses on the extraction, cleansing, and migration of legacy workforce data for prime contractors. Key responsibilities include developing comprehensive data migration plans, executing mapping from legacy systems to new schemas, and performing rigorous data validation to deliver a final migrated production database. The contract is designated as an SBA set-aside for Small Business Enterprises and Disabled Veteran Owned Businesses under NAICS code 541512. Due to the nature of the work, contractors must enter into data confidentiality agreements with the New Jersey Office of Homeland Security and Preparedness. The solicitation was posted on November 5, 2026, with a response deadline of February 4, 2027.

Division of Purchase and Property

POSTED

DEADLINE

T3151 Workforce Development Case Management Solution

Solicitation # 27DPP01356

The T3151 Workforce Development Case Management Solution is a solicitation issued by the New Jersey Division of Purchase and Property to implement a comprehensive system for tracking jobseekers, managing employer records, and handling Foreign Labor Certifications. The scope of work includes the development of a Workforce Staff Portal, a Vendor Portal, and fiscal management tools to track training expenditures. Key technical requirements include the ability to generate PIRL and WIPS schema formats for the U.S. Department of Labor, support for real-time API or batch transfers with systems such as NJCFS, LOOPS, and AWARE, and the provision of USDOL certified language translators for self-service tools. The contract is a firm-fixed-cost arrangement featuring 17 primary deliverables, ranging from a project management plan and system configuration to a final delivery of the configured solution and post-implementation review. Award decisions will be based on the most advantageous quote, evaluating price alongside technical factors such as personnel qualifications, firm experience, and the proposed solution design. Bidders must adhere to strict submission guidelines via NJSTART by February 4, 2027, and must comply with various state and federal regulations, including the New Jersey Prevailing Wage Act, ADA compliance, and specific cybersecurity and confidentiality agreements with the New Jersey Office of Homeland Security and Preparedness. Additionally, the successful contractor must provide a one-year performance bond and undergo a six-week mobilization period.

Division of Purchase and Property

POSTED

DEADLINE

581-27 OHGO Enhancements

Solicitation # SRC0000042915

The Ohio Department of Transportation is soliciting proposals from qualified vendors to provide changes, enhancements, and upgrade services for OHGO on a task-order basis. The selected vendor will be responsible for furnishing all necessary labor, equipment, and materials to perform these services, which will be managed according to business unit priority and limited by a predetermined, approved fiscal budget cap. This solicitation seeks vendors whose capabilities and services best align with the Department's specific technical needs for business function specific software. The scope of work focuses on providing technical resources for project enhancements and maintenance, with key deliverables including ADA compliance and the implementation of mile markers. Additionally, the contract includes provisions for break-fix services to ensure ongoing system stability. This solicitation, identified as SRC0000042915, is managed through the OhioBuys system for the state of Ohio.

Dept Of Transportation

POSTED

DEADLINE

NVR Installation and ConfigurationThis subcontract involves the physical installation and software configuration of Exacq vision NVRs for prime contractors supporting Department of Veterans Affairs security projects at the West Roxbury VAMC. The scope of work includes mounting hardware in racks, configuring camera IP addresses, establishing recording schedules, and testing system redundancy to ensure a fully operational and integrated NVR system. Qualified providers must hold Exacq vision Certified Installer credentials to perform the work. The project falls under NAICS code 541512 and is managed through the Department of Veterans Affairs Network Contract Office 01, with performance taking place in West Roxbury, Massachusetts.

241-NETWORK Contract Office 01 (36C241)

POSTED

DEADLINE

Health Information Exchange (HIE) IntegrationThe Health Information Exchange Integration subcontract, issued by the Defense Health Agency under the Department of Defense, focuses on the development and sustainment of critical data interfaces for prime contractors. The scope of work involves maintaining seamless data connectivity between BATDOK FoS and several key systems, including MHS GENESIS Theater, OMDS, MEDIX, and OpMed CDP. To ensure interoperability, the contractor must facilitate data transfers via digital means and QR codes in strict accordance with HL7 Version 2, HL7 FHIR, and Government Interface Control Documents. The primary deliverables for this effort include the provision of validated data interfaces and comprehensive transmission logs. Classified under NAICS code 541512, this opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026. The project is essential for maintaining standardized health information exchange across various military health systems to support operational readiness.

Defense Health Agency

POSTED

DEADLINE

Standalone Inventory Management Software & HardwareThis subcontract involves the supply and configuration of standalone inventory management solutions and dedicated hardware for prime contractors working on Department of Veterans Affairs facility projects in Orlando, Florida. The scope of work includes providing a desktop computer equipped with GUI software designed to track over 2,200 garments. To ensure security, the system must be configured as air-gapped, meaning it will have no connectivity to the internet, cloud services, or hospital networks. The provider is responsible for delivering fully operational software on a dedicated PC, accompanied by comprehensive user and administrator manuals and established backup procedures. This opportunity falls under NAICS code 541512 and is managed by the Department of Veterans Affairs Network Contract Office 8.

248-NETWORK Contract Office 8 (36C248)

POSTED

about 13 hours ago

DEADLINE

in 7 days

AI Contract Overview

The contract requires implementation and maintenance of CMMC Level 2 compliance to safeguard Controlled Unclassified Information in alignment with NIST SP 800-171 standards. This subcontract is issued under the Aviation Supply Chain within the Department of Defense and pertains to cybersecurity measures necessary to protect sensitive data throughout the supply chain lifecycle. The place of performance is centered at Hill Air Force Base with a zip code of 84056-5734, indicating the operational location where compliance activities must be executed and sustained. The NAICS code 541512 identifies the scope as computer systems design and related services, underscoring the technical nature of the work involved. All responsible parties must submit responses by the deadline of July 22, 2026, following the solicitation posted on July 14, 2026. The requirement is not subject to any specified set-aside classification, meaning it is open to all eligible contractors regardless of business size or ownership structure. While no point of contact is listed, the official RFQ portal is accessible via the provided link for further details and submissions. The focus is strictly on achieving and maintaining a robust cybersecurity posture that meets federal mandates for handling CUI, with ongoing monitoring and documentation required to ensure continuous compliance.