This Subcontract opportunity from Department Of Defense was posted on July 12, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity and NIST SP 800-171 Assessment

Closed

Federal

Submission Closed07/23/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0417

This procurement, solicitation number SPE8EN-27-T-0417, is for the acquisition of 18 units of a digital computer system, specifically identified as a Commercial Off-The-Shelf item from Panasonic Corporation (P/N FZ-55DZ-0EKM) with NSN 7010-30-700-6647. The contract is managed by the Defense Logistics Agency (DLA) Troop Support, Construction and Equipment office. Delivery is required within 153 days after order, with a need ship date of April 26, 2027, and an original required delivery date of August 20, 2027. The items are to be delivered FOB Origin to the DLA Distribution San Joaquin facility in Tracy, California, with both inspection and acceptance occurring at the destination. The contract mandates strict adherence to technical and quality requirements found in the DLA Master List, which takes precedence over the general packaging standard ASTM D3951. All packaging and labeling must comply with MIL-STD-129, and palletization must follow RP001 requirements. Additionally, the contract prohibits the intentional addition of mercury or mercury compounds to hardware, except for specific functional exceptions. Legally, the agreement incorporates various FAR and DFARS clauses, including those regarding the Buy American Act, the Berry Amendment, and the safeguarding of covered defense information. Invoicing and payment must be processed electronically through the Wide Area WorkFlow (WAWF) system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0414

Solicitation SPE8EN-27-T-0414 is a request for quotations issued by the DLA Troop Support Construction and Equipment office for the procurement of eight digital computer systems, identified by NSN 7010-01-722-2099 and part number REC-MA3001 from Rugged Science, LLC. The contract requires delivery within 153 days after order, with a need ship date of April 26, 2027, and a final required delivery date of August 21, 2027. Supplies are to be delivered FOB Origin to the DLA Distribution DDSP New Cumberland facility in Pennsylvania. The acquisition is governed by the DLA Master Solicitation for Automated Simplified Acquisitions and incorporates strict technical and quality requirements, including MIL-STD-129 for marking and MIL-STD-2073-1E for packaging. Key restrictions include a prohibition on the intentional addition of mercury to hardware, except for specific functional uses, and compliance with the Buy American and Balance of Payments Program. The contract also mandates rigorous cybersecurity standards, including DFARS 252.204-7012 for safeguarding covered defense information and NIST SP 800-171 assessment requirements. Payment and invoicing must be processed electronically through the Wide Area Workflow system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

Airport Digital Twin Platform Implementation and Support Services

Solicitation # 2027-006-RFP

The Sanford Airport Authority is soliciting proposals under RFP 2027-006 for the implementation and support of an Airport Digital Twin Platform and an open, standards-based ecosystem at Orlando Sanford International Airport. The project aims to integrate disparate operational, maintenance, business, and facility systems into a common digital environment to enhance asset management, operational awareness, and facility stewardship. Initial implementation will focus on terminal and airfield infrastructure, specifically targeting performance monitoring, preventive and predictive maintenance, and engineering decision support. The platform is intended to complement existing systems of record rather than replace them, providing enhanced visualization, analytics, and dashboards. The procurement process is governed by a points-based evaluation focusing on the technical approach, implementation roadmap, respondent experience, team qualifications, training sustainability, and the five-year cost of ownership. Proposals were due by November 24, 2026, with a scheduled board award date of February 2, 2027. Selected providers must meet specific Florida insurance requirements, including Commercial General Liability and Professional Liability of at least 1,000,000 dollars, and comply with state regulations regarding scrutinized companies. The resulting contract will be non-exclusive, and the provider will be responsible for delivering a scalable platform along with comprehensive training for system administrators, IT, and executive users.

POSTED

DEADLINE

Technical Support & Account Management

POSTED

DEADLINE

System Integration & Data Migration Services

POSTED

DEADLINE

AI-Driven Fraud Detection and Transaction Security

POSTED

DEADLINE

Cisco Network Switch Procurement and ConfigurationThis subcontract agreement involves the procurement and configuration of Cisco network switches for prime contractors working on South African National Blood Service projects. The selected provider is responsible for supplying hardware according to the Bill of Quantities and ensuring all devices are configured to meet the specific technical requirements outlined in Annexure A. To be eligible, providers must hold a Cisco Portfolio Partner or Cisco Preferred Partner certification. The final deliverable consists of fully configured Cisco network switches delivered within South Africa. The response deadline for this opportunity is November 20, 2026.

South African National Blood Service

POSTED

DEADLINE

3CX Telephony Support and Maintenance

Information Technology

POSTED

DEADLINE

Network and Security Engineering Services

Information Technology

POSTED

DEADLINE

General Information Technology Services

Solicitation # 2026-008

The City of Zephyrhills, Florida, is soliciting proposals for comprehensive general information technology support and managed services under solicitation 2026-008. The selected consultant will supplement the City Information Technology Department by providing enterprise network, cybersecurity, cloud, systems, telecommunications, endpoint, backup, monitoring, and help desk services for both City and Police facilities. Key technical requirements include the provision of a specialized staffing plan featuring roles such as a Systems and Cloud Architect, Senior Network and Security Engineer, and Microsoft 365 Administrator. The vendor must be a WatchGuard Gold Partner or higher, a Microsoft partner, and a 3CX Partner. Critical performance standards include immediate remote response for critical issues and on-site response within two hours. Personnel assigned to Police or criminal justice environments must maintain FDLE CJIS background fingerprinting and certifications. The selection process is a multi-stage evaluation based on professional qualifications, where written responses are scored to create a short list of three firms for interviews. Final selection is based on the Evaluation Committee's ranking, with negotiations beginning with the top-ranked vendor. In the event of a tie, minority or female-owned firms are ranked higher. The contract is a cooperative purchase agreement subject to annual legislative fund appropriations. Vendors must comply with various regulatory standards, including the Americans with Disabilities Act, the Civil Rights Act of 1964 and 1968, and the Defense Department's requirements for covered telecommunications equipment. Required submission materials include a detailed technical approach, financial responsibility statements, and specific affidavits regarding human trafficking and foreign countries of concern.

Information Technology

POSTED

DEADLINE

ERP Integration & Data Migration SpecialistThis subcontract opportunity for an ERP Integration and Data Migration Specialist supports modernization projects for The Harris Center for Mental Health and IDD in Texas. The selected provider will be responsible for integrating new ERP systems with existing legacy technology and executing historical data migrations for prime contractors. Key technical requirements include API development, data mapping, and the implementation of ETL processes utilizing integration middleware and specialized data migration tools to deliver a fully integrated system environment. The solicitation was posted on November 11, 2026, with a response deadline of January 27, 2027. Classified under NAICS code 541512, the project focuses on delivering seamless system connectivity and accurate migrated data sets to enhance the agency's operational infrastructure.

HARRIS CENTER FOR MENTAL HEALTH

POSTED

1 day ago

DEADLINE

in 3 months

AI Contract Overview

The contract requires the performance of a cybersecurity assessment aligned with NIST SP 800-171 to ensure compliance with DFARS 252.240-7997 and the safeguarding of controlled unclassified information within contractor systems. The assessment must evaluate the implementation of security controls designed to protect CUI and validate adherence to federal cybersecurity standards applicable to defense supply chain contractors. The work is structured as a subcontract under the Department of Defense's Land Supply Chain, with a place of performance designated as FPO 96349, indicating operations may occur in a military postal address environment. The solicitation was posted on July 12, 2026, with responses due by July 23, 2026, and falls under the NAICS code 541512 for computer systems design services. While no set-aside classification or point of contact information is provided, the contract is accessible via the DIBBS portal and is intended for entities capable of delivering a formal, auditable cybersecurity evaluation of systems handling sensitive defense information. Compliance with NIST SP 800-171 requirements is mandatory, and failure to meet these standards may result in non-compliance with broader Defense Federal Acquisition Regulation Supplement obligations.