This Subcontract opportunity from Utah was posted on July 30, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and IT Risk Assessment Services

Closed

State & Local

Submission Closed08/06/2026, 04:00:00 PM MDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0417

This procurement, solicitation number SPE8EN-27-T-0417, is for the acquisition of 18 units of a digital computer system, specifically identified as a Commercial Off-The-Shelf item from Panasonic Corporation (P/N FZ-55DZ-0EKM) with NSN 7010-30-700-6647. The contract is managed by the Defense Logistics Agency (DLA) Troop Support, Construction and Equipment office. Delivery is required within 153 days after order, with a need ship date of April 26, 2027, and an original required delivery date of August 20, 2027. The items are to be delivered FOB Origin to the DLA Distribution San Joaquin facility in Tracy, California, with both inspection and acceptance occurring at the destination. The contract mandates strict adherence to technical and quality requirements found in the DLA Master List, which takes precedence over the general packaging standard ASTM D3951. All packaging and labeling must comply with MIL-STD-129, and palletization must follow RP001 requirements. Additionally, the contract prohibits the intentional addition of mercury or mercury compounds to hardware, except for specific functional exceptions. Legally, the agreement incorporates various FAR and DFARS clauses, including those regarding the Buy American Act, the Berry Amendment, and the safeguarding of covered defense information. Invoicing and payment must be processed electronically through the Wide Area WorkFlow (WAWF) system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0414

Solicitation SPE8EN-27-T-0414 is a request for quotations issued by the DLA Troop Support Construction and Equipment office for the procurement of eight digital computer systems, identified by NSN 7010-01-722-2099 and part number REC-MA3001 from Rugged Science, LLC. The contract requires delivery within 153 days after order, with a need ship date of April 26, 2027, and a final required delivery date of August 21, 2027. Supplies are to be delivered FOB Origin to the DLA Distribution DDSP New Cumberland facility in Pennsylvania. The acquisition is governed by the DLA Master Solicitation for Automated Simplified Acquisitions and incorporates strict technical and quality requirements, including MIL-STD-129 for marking and MIL-STD-2073-1E for packaging. Key restrictions include a prohibition on the intentional addition of mercury to hardware, except for specific functional uses, and compliance with the Buy American and Balance of Payments Program. The contract also mandates rigorous cybersecurity standards, including DFARS 252.204-7012 for safeguarding covered defense information and NIST SP 800-171 assessment requirements. Payment and invoicing must be processed electronically through the Wide Area Workflow system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

Airport Digital Twin Platform Implementation and Support Services

Solicitation # 2027-006-RFP

The Sanford Airport Authority is soliciting proposals under RFP 2027-006-RFP for the implementation and support of an Airport Digital Twin Platform and an open, standards-based ecosystem at Orlando Sanford International Airport (SFB). The project aims to integrate disparate operational, maintenance, business, and facility systems into a common digital environment to enhance asset management, operational awareness, and facility stewardship. The initial phase of implementation will specifically focus on terminal and airfield asset management, utilizing a spatial approach that incorporates GIS, CAD, BIM, LiDAR imagery, and engineering drawings to support preventive, corrective, and predictive maintenance. The procurement process requires a comprehensive proposal submitted via the Authority's e-Procurement portal by November 23, 2026, with a scheduled board award date of February 2, 2027. Proposals are evaluated on a points-based system focusing on the technical approach, implementation roadmap, experience, key personnel, training, and the total five-year cost of ownership. Mandatory minimum qualifications include registration to do business in Florida, adherence to scrutinized company restrictions, and the ability to maintain specific insurance coverages, including $1,000,000 in professional liability and $2,000,000 in annual general aggregate liability. The resulting non-exclusive contract will require the solution provider to deliver a scalable, configuration-based platform that complements existing systems of record.

POSTED

DEADLINE

Technical Support & Account Management

POSTED

DEADLINE

System Integration & Data Migration Services

POSTED

DEADLINE

AI-Driven Fraud Detection and Transaction Security

POSTED

DEADLINE

Cisco Network Switch Procurement and ConfigurationThis subcontract agreement involves the procurement and configuration of Cisco network switches for prime contractors working on South African National Blood Service projects. The selected provider is responsible for supplying hardware according to the Bill of Quantities and ensuring all devices are configured to meet the specific technical requirements outlined in Annexure A. To be eligible, providers must hold a Cisco Portfolio Partner or Cisco Preferred Partner certification. The final deliverable consists of fully configured Cisco network switches delivered within South Africa. The response deadline for this opportunity is November 20, 2026.

South African National Blood Service

POSTED

DEADLINE

3CX Telephony Support and Maintenance

Information Technology

POSTED

DEADLINE

Network and Security Engineering Services

Information Technology

POSTED

DEADLINE

General Information Technology Services

Solicitation # 2026-008

The City of Zephyrhills, Florida, is soliciting proposals for comprehensive general information technology support and managed services under solicitation 2026-008. The selected consultant will supplement the City Information Technology Department by providing enterprise network, cybersecurity, cloud, systems, telecommunications, endpoint, backup, monitoring, and help desk services for both City and Police facilities. Key technical requirements include the provision of a specialized staffing plan featuring roles such as a Systems and Cloud Architect, Senior Network and Security Engineer, and Microsoft 365 Administrator. The vendor must be a WatchGuard Gold Partner or higher, a Microsoft partner, and a 3CX Partner. Critical performance standards include immediate remote response for critical issues and on-site response within two hours. Personnel assigned to Police or criminal justice environments must maintain FDLE CJIS background fingerprinting and certifications. The selection process is a multi-stage evaluation based on professional qualifications, where written responses are scored to create a short list of three firms for interviews. Final selection is based on the Evaluation Committee's ranking, with negotiations beginning with the top-ranked vendor. In the event of a tie, minority or female-owned firms are ranked higher. The contract is a cooperative purchase agreement subject to annual legislative fund appropriations. Vendors must comply with various regulatory standards, including the Americans with Disabilities Act, the Civil Rights Act of 1964 and 1968, and the Defense Department's requirements for covered telecommunications equipment. Required submission materials include a detailed technical approach, financial responsibility statements, and specific affidavits regarding human trafficking and foreign countries of concern.

Information Technology

POSTED

DEADLINE

ERP Integration & Data Migration SpecialistThis subcontract opportunity for an ERP Integration and Data Migration Specialist supports modernization projects for The Harris Center for Mental Health and IDD in Texas. The selected provider will be responsible for integrating new ERP systems with existing legacy technology and executing historical data migrations for prime contractors. Key technical requirements include API development, data mapping, and the implementation of ETL processes utilizing integration middleware and specialized data migration tools to deliver a fully integrated system environment. The solicitation was posted on November 11, 2026, with a response deadline of January 27, 2027. Classified under NAICS code 541512, the project focuses on delivering seamless system connectivity and accurate migrated data sets to enhance the agency's operational infrastructure.

HARRIS CENTER FOR MENTAL HEALTH

POSTED

about 16 hours ago

DEADLINE

in 3 months

AI Contract Overview

The contract requires the provision of cybersecurity risk assessment services focused on safeguarding electronic health information in alignment with the HITECH Act and HIPAA Security Rule. The work entails identifying vulnerabilities, evaluating existing controls, and ensuring ongoing compliance with federal privacy and security standards applicable to protected health information. The scope is designed to support the Utah agency in maintaining robust cybersecurity posture and meeting mandatory regulatory requirements for handling sensitive health data. This is a subcontract opportunity posted on July 30, 2026, with a response deadline of August 6, 2026. It falls under NAICS code 541512, which classifies it as computer systems design and related services. The place of performance and organizational details are not specified, and no set-aside provisions are indicated. Proposals must be submitted through the Bonfire platform at the provided URL, and all work must adhere strictly to federal healthcare data protection mandates without deviation.