This Subcontract opportunity from Kentucky was posted on July 29, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and Data Protection Services (for PHI/PII Handling)

Closed

State & Local

Submission Closed09/01/2026, 02:00:00 PM EDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Industrial Network Infrastructure and Security ImplementationThe Industrial Network Infrastructure and Security Implementation subcontract involves the installation and configuration of networking architecture and security protocols for prime contractors working on City of Spokane wastewater projects. The scope of work focuses on implementing VLANs, network segmentation, NAT, and device hardening utilizing Nutanix and industrial switches. These efforts are designed to ensure the infrastructure meets EPA Level 2 security standards and adheres to the specific IP addressing, server configurations, and security roles mandated by City of Spokane and WWC SCADA policies. The primary deliverables for this engagement include a fully secured and segmented network architecture along with a comprehensive report documenting all implemented security measures. This project falls under NAICS code 541512 and is associated with the City of Spokane in Washington. Interested parties should note the response deadline of December 29, 2026.

POSTED

DEADLINE

PlantPAx SCADA System Integration and ProgrammingThis subcontract involves the design, configuration, and programming of SCADA systems for prime contractors working on City of Spokane wastewater projects. The selected provider will be responsible for developing Functional Design Specifications, programming control logic, managing alarms, and creating HMI templates. Technical execution must utilize Rockwell Automation PlantPAx, FactoryTalk Studio, and Studio 5000 to deliver a fully operational and verified system complete with a Rockwell Automation System ID. To qualify for this engagement, the contractor must hold a Rockwell Silver Level System Integrator ranking and possess PlantPAx badged certification. Interested parties must submit their responses by December 29, 2026, in accordance with the solicitation posted on November 11, 2026.

POSTED

DEADLINE

CSO 24, 26 Storage and Springfield Lift Station SCADA Upgrade

Solicitation # 6645-26

The City of Spokane is soliciting proposals for SCADA upgrade services for the CSO 24, 26 Storage and Springfield Lift Station. This project is the second phase of a SCADA monitoring and control Master Plan, focusing on data acquisition, historization, alarming, and security. The scope of work includes the installation, configuration, and networking of a SCADA system using PlantPAx and Allen Bradley/Rockwell Automation products. Key deliverables include a turnkey, fully operational SCADA system, exhaustive project documentation, and the completion of a Final Site Acceptance Test. The project requires adherence to Converged Plant Wide Ethernet standards and must receive a Rockwell Automation System ID upon completion. The contract is expected to begin in March or April 2027 with a primary duration of one year, renewable for an additional six months upon mutual agreement. Proposals must be submitted electronically via the ProcureWare portal by December 29, 2026, at 11:00 AM. Qualified firms and system integrators must possess at least three years of experience and are preferred to hold Rockwell Silver Level System Integrator ranking and PlantPAx badged integrator certification. Awarding will be based on the proposal most favorable to the City, with evaluation focusing on technical management and completeness. Required insurance includes General Liability, Professional Liability, and Workers Compensation, with a 90-day proposal acceptance period.

POSTED

DEADLINE

Fuel Management System (FMS) Software & IntegrationThis subcontract for Northumberland County Council involves the supply and configuration of a comprehensive Fuel Management System software suite. The project focuses on developing systems capable of 24/7 unmanned operation, featuring real-time tank monitoring, local transaction storage, and the ability to detect discrepancies between book and gauge records. To ensure operational efficiency, the software must be integrated with existing ERP systems, fleet management tools, telematics, fuel card providers, and business intelligence platforms. The scope of work further includes the implementation of carbon reporting modules and role-based access control to maintain security and sustainability tracking. The successful provider will deliver a fully configured and integrated FMS suite designed to support prime contractors on council projects. Interested parties must respond by November 25, 2026.

Northumberland County Council

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0417

This procurement, solicitation number SPE8EN-27-T-0417, is for the acquisition of 18 units of a digital computer system, specifically identified as a Commercial Off-The-Shelf item from Panasonic Corporation (P/N FZ-55DZ-0EKM) with NSN 7010-30-700-6647. The contract is managed by the Defense Logistics Agency (DLA) Troop Support, Construction and Equipment office. Delivery is required within 153 days after order, with a need ship date of April 26, 2027, and an original required delivery date of August 20, 2027. The items are to be delivered FOB Origin to the DLA Distribution San Joaquin facility in Tracy, California, with both inspection and acceptance occurring at the destination. The contract mandates strict adherence to technical and quality requirements found in the DLA Master List, which takes precedence over the general packaging standard ASTM D3951. All packaging and labeling must comply with MIL-STD-129, and palletization must follow RP001 requirements. Additionally, the contract prohibits the intentional addition of mercury or mercury compounds to hardware, except for specific functional exceptions. Legally, the agreement incorporates various FAR and DFARS clauses, including those regarding the Buy American Act, the Berry Amendment, and the safeguarding of covered defense information. Invoicing and payment must be processed electronically through the Wide Area WorkFlow (WAWF) system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0414

Solicitation SPE8EN-27-T-0414 is a request for quotations issued by the DLA Troop Support Construction and Equipment office for the procurement of eight digital computer systems, identified by NSN 7010-01-722-2099 and part number REC-MA3001 from Rugged Science, LLC. The contract requires delivery within 153 days after order, with a need ship date of April 26, 2027, and a final required delivery date of August 21, 2027. Supplies are to be delivered FOB Origin to the DLA Distribution DDSP New Cumberland facility in Pennsylvania. The acquisition is governed by the DLA Master Solicitation for Automated Simplified Acquisitions and incorporates strict technical and quality requirements, including MIL-STD-129 for marking and MIL-STD-2073-1E for packaging. Key restrictions include a prohibition on the intentional addition of mercury to hardware, except for specific functional uses, and compliance with the Buy American and Balance of Payments Program. The contract also mandates rigorous cybersecurity standards, including DFARS 252.204-7012 for safeguarding covered defense information and NIST SP 800-171 assessment requirements. Payment and invoicing must be processed electronically through the Wide Area Workflow system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

Plant-Wide Control Systems IntegrationThis subcontract involves the design and installation of plant-wide control architectures for prime contractors working on UK Fusion Energy Ltd Spherical Tokamak Prototype projects. The primary objective is to integrate various disparate system controls into a single, unified plant management system, resulting in the delivery of a comprehensive Plant Control System. The procurement process began on November 11, 2026, with a response deadline set for January 29, 2027. Due to the sensitive nature of the work, participating parties are required to execute both a Mutual NDA and an Ethical Walls Agreement. The project falls under NAICS code 541512 and is managed by UK Fusion Energy Ltd.

POSTED

DEADLINE

Airport Digital Twin Platform Implementation and Support Services

Solicitation # 2027-006-RFP

The Sanford Airport Authority is soliciting proposals under RFP 2027-006 for the implementation and support of an Airport Digital Twin Platform and an open, standards-based ecosystem at Orlando Sanford International Airport. The project aims to integrate disparate operational, maintenance, business, and facility systems into a common digital environment to enhance asset management, operational awareness, and facility stewardship. Initial implementation will focus on terminal and airfield infrastructure, specifically targeting performance monitoring, preventive and predictive maintenance, and engineering decision support. The platform is intended to complement existing systems of record rather than replace them, providing enhanced visualization, analytics, and dashboards. The procurement process is governed by a points-based evaluation focusing on the technical approach, implementation roadmap, respondent experience, team qualifications, training sustainability, and the five-year cost of ownership. Proposals were due by November 24, 2026, with a scheduled board award date of February 2, 2027. Selected providers must meet specific Florida insurance requirements, including Commercial General Liability and Professional Liability of at least 1,000,000 dollars, and comply with state regulations regarding scrutinized companies. The resulting contract will be non-exclusive, and the provider will be responsible for delivering a scalable platform along with comprehensive training for system administrators, IT, and executive users.

POSTED

DEADLINE

Technical Support & Account Management

POSTED

DEADLINE

System Integration & Data Migration Services

POSTED

DEADLINE

AI-Driven Fraud Detection and Transaction Security

Purchasing

POSTED

about 23 hours ago

DEADLINE

in about 2 months

AI Contract Overview

This contract seeks cybersecurity infrastructure services to safeguard protected health information and personally identifiable information in full compliance with HIPAA and applicable state laws. The services must include end-to-end encryption, a robust incident response plan, and mandatory U.S.-based data storage to ensure data sovereignty and regulatory adherence. The work is structured as a subcontract under NAICS code 541512, which classifies it under computer systems design and related services, and is being procured by the state of Kentucky based in Frankfort. All performance must occur within the United States, with no specific city designated beyond the general location of Other, ensuring flexibility in execution while maintaining compliance with jurisdictional requirements. Proposals are due by September 1, 2026, and the solicitation was posted on July 29, 2026, indicating a competitive procurement timeline for qualified vendors capable of delivering secure, lawful, and reliable data protection solutions.

General Info

Cybersecurity services for HIPAA-compliant health data with U.S.-based storage, encryption, and incident response under Kentucky procurement.

Agency

Kentucky → Frankfort, KY

NAICS

541512 - Computer Systems Design Services

Place of Performance

Other, KY, USA

Set-Aside

NONE

Documents

This scope was carved out of RFP-729-2600000510-1.

The full solicitation package (5 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFP-729-2600000510-1 | Dietitian Services (C5882)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 29

subcontract

Response DeadlineSep 1

Deadline has passed

Submission Closed

09/01/2026, 02:00:00 PM EDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyKentucky → Frankfort, KY

ContactsNo contacts available

OfficeN/A

Organization / AgencyKentucky → Frankfort, KY

Office AddressN/A

ContactsNo contact information available

Full Description

Provide cybersecurity infrastructure to protect PHI/PII with encryption, incident response, and U.S.-based data storage in compliance with HIPAA and state law.