This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance and CMMC Assessment Support

Closed

Federal

Submission Closed07/24/2026, 01:00:00 PM EDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Windows Server Administration and SupportThe Windows Server Administration and Support subcontract involves providing technical support and maintenance for Windows Server infrastructure to prime contractors working on City of Surrey projects. The selected provider will be responsible for server-side technical support, managing incident responses for server-related issues, and ensuring that server availability and performance consistently meet the standards set by the City of Surrey. Key deliverables include the maintenance of a stable server environment and the provision of detailed incident resolution reports. Qualified candidates must possess a Windows Server certification or provide evidence of equivalent professional expertise. This opportunity is associated with NAICS code 541512 and is based in Canada. Interested parties must submit their responses by the deadline of December 1, 2026.

POSTED

DEADLINE

Power Platform and Dynamics 365 Specialized SupportThis subcontract opportunity involves providing specialized technical support for low-code automation and CRM platforms to prime contractors working on City of Surrey projects. The selected provider will be responsible for troubleshooting and maintaining Dynamics 365 configurations and Power Platform workflows, while managing the intake of service requests and delivering technical resolutions. Additionally, the role requires providing system health and stability reporting to the management team to ensure operational efficiency. Technical proficiency in Microsoft Power Platform and Dynamics 365 is mandatory for this engagement. The contract is categorized under NAICS code 541512 and is based in Canada. Interested parties must submit their responses by the deadline of December 1, 2026.

POSTED

DEADLINE

Microsoft 365 and SharePoint Online Technical SupportThis subcontract focuses on providing specialized technical support and troubleshooting for Microsoft 365 and SharePoint Online environments to benefit prime contractors working on City of Surrey projects in Canada. The scope of work involves managing the end-to-end service request process through a dedicated support portal and communication channels, with a capacity to resolve up to 100 support incidents annually. The service provider is required to adhere to strict response time SLAs, particularly for critical severity-A incidents, and must provide regular management reports detailing activity and milestones. This engagement is categorized under NAICS code 541512 and is associated with the Province of British Columbia.

POSTED

DEADLINE

Software Implementation and Integration ConsultantThis subcontract for a Software Implementation and Integration Consultant involves the technical integration of POD software for prime contractors supporting University of Michigan HomeMed Pharmacy projects. The selected consultant is responsible for the end-to-end delivery of a fully operational integrated system, beginning with the project assessment phase and continuing through software configuration tailored to specific pharmacy operational needs. Key deliverables include the development of a comprehensive project execution plan and a robust risk management strategy. The scope of work requires the coordination of both on-site and off-site activities to ensure all milestones are met within a defined project timeline. This engagement falls under NAICS code 541512 and is associated with the University of Michigan. Interested parties should note the response deadline of November 18, 2026.

University of Michigan

POSTED

DEADLINE

Proof of Delivery (POD) for HomeMed Pharmacy

Solicitation # RFP-0012500-TECH-2026

The University of Michigan is soliciting proposals under RFP-0012500-TECH-2026 for a HIPAA-compliant proof-of-delivery (POD) and delivery management software solution for HomeMed Pharmacy. The objective is to modernize pharmacy operations by implementing a platform that supports electronic signature capture, photo verification, geofencing, and patient-facing digital confirmations. Key technical requirements include route optimization, real-time driver tracking, and bidirectional integration with CareTend (Wellsky) and Epic. The solution must adhere to strict accessibility standards, including WCAG 2.1 Level AA, Section 508, and the Americans with Disabilities Act. The contract is envisioned as a three-year initial agreement with the option to extend for two additional one-year periods. Suppliers must provide a comprehensive proposal including an executive summary, a detailed cost proposal via Excel, and a data security agreement signed as is. Cybersecurity certifications such as SOC2 Type 2, ISO 27001, or HITRUST are highly relevant to the evaluation. Payment terms are Net 0 days for suppliers enrolled in a virtual card program, or Net 45 days otherwise. Proposals were due by November 17, 2026, and the University requires interviews with key personnel before the project commences.

University of Michigan

POSTED

DEADLINE

System Testing and Quality Assurance for Chainbridge EnhancementsThis subcontract focuses on providing system testing and quality assurance for Chainbridge enhancements supporting the Alabama Tax Policy and Research agency. The selected provider will perform independent testing of system enhancements, which includes developing test scripts and executing functional, regression, and User Acceptance Testing within designated system sandboxes. Key deliverables for this engagement include comprehensive test reports, detailed bug logs, and formal UAT sign-off documentation. To be eligible, the contractor must be enrolled in E-Verify and certify the remittance of all applicable Alabama state and local sales and use taxes. The project falls under NAICS code 541512 and requires the contractor to work as a subcontractor for prime contractors managing these state projects.

Tax Policy And Research

POSTED

DEADLINE

Chainbridge System Enhancements Continuation Req. 11/9/2026

Solicitation # SRC0000037616

The Chainbridge System Enhancements Continuation is a solicitation issued by the Alabama agency Tax Policy And Research for services under NAICS code 541512. The contract has a total value cap of 25,000 dollars, which includes the original agreement and any subsequent renewals. The term of the contract allows for annual renewals by written agreement for a total period of up to five years from the effective date. Performance and venue for litigation are centered in the state of Alabama, specifically the City of Montgomery. The agreement is governed by the Code of Alabama 1975, with specific provisions regarding non-appropriation of funds and proration, meaning the contract may be cancelled if funds are not available for subsequent fiscal periods. Suppliers must comply with several state mandates, including registration with the Alabama Secretary of State for foreign entities, enrollment in the E-Verify program, and certification of tax compliance under Act no. 2006-557. All responses must be submitted electronically through the Alabama Buys portal, and the State reserves the right to conduct cost realism and price reasonableness analyses for all bids.

Tax Policy And Research

POSTED

DEADLINE

OpenGov Budgeting Software Supply

POSTED

DEADLINE

XR Training Systems IntegratorThe XR Training Systems Integrator subcontract involves the setup, configuration, and integration of virtual reality hardware and software to support training projects for the Texas Office of the Attorney General. The selected provider will work under prime contractors to execute hardware assembly, software installation, and network configuration specifically for multi-user VR environments, ensuring the delivery of a fully operational and integrated training system. Qualified candidates must possess relevant IT certifications to perform the technical requirements of the role. This opportunity is categorized under NAICS code 541512 and was posted on November 9, 2026, with a response deadline of November 24, 2026.

POSTED

DEADLINE

BRCD Contracts for Innovation Challenge 1

Solicitation # Tender 65/2026

Tender 65/2026, titled Predicting Demand. Managing Tomorrows Visitors, Today, is a competitive flexible procurement led by Newry Mourne and Down District Council. The project aims to transition local authority visitor management from a reactive, fragmented approach to an evidence-led, predictive model. Using Castlewellan Forest Park as a real-world test environment, the initiative seeks to anticipate visitor demand and movement to proactively mitigate impacts on infrastructure, parking, waste services, and biodiversity. The procurement is structured as a multi-stage Contracts for Innovation challenge with an estimated performance period from January 3, 2028, to January 2, 2032. The procurement follows a phased funding structure with a total R&D budget of 640,000 GBP for the initial stages. In Stage 2, up to five suppliers may receive up to 50,000 GBP each to develop a proof of concept. Stage 3 allows up to three suppliers to receive up to 130,000 GBP each for further solution refinement. Successful Stage 3 suppliers may then be appointed to a call-off framework for six partner councils, with an estimated total maximum contract value of 2,000,000 GBP including VAT. Awards are based on the Most Advantageous Tender criteria, with Stage 1 evaluations weighted on quality. All submissions must be completed via the Simply Do platform by the deadline of December 11, 2026, at 4:00pm.

Newry Mourne & Down District Council

POSTED

DEADLINE

Cybersecurity Testing and Assurance ProviderThe United Kingdom Sports Council is seeking a Cybersecurity Testing and Assurance Provider to serve as a subcontractor for digital projects. The selected provider will perform independent security and penetration testing for prime contractors, focusing on vulnerability management, security monitoring, and the validation of Secure by Design implementations. These tasks will be executed using specialized penetration testing software and scanners to ensure the integrity of digital assets. The provider is responsible for delivering comprehensive security testing reports, remediation records, and necessary assurance evidence. Key deliverables include the creation of detailed remediation plans to address identified vulnerabilities. Interested parties must submit their responses by December 11, 2026, in accordance with the solicitation posted on November 9, 2026.

The United Kingdom Sports Council

POSTED

about 12 hours ago

DEADLINE

in about 1 month

AI Contract Overview

The contract seeks support for achieving Cybersecurity Maturity Model Certification Level 2 compliance and adherence to NIST Special Publication 800-171 requirements to properly safeguard controlled unclassified information. The work involves conducting a self-assessment of cybersecurity practices, implementing necessary controls, and documenting compliance measures to meet federal standards for protecting CUI within the defense supply chain. This subcontract is tied to the Department of Defense’s Active Devices Division and requires performance at a specified location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation falls under NAICS code 541512, classifying it as computer systems design services, and is open for responses until July 24, 2026, with the opportunity posted on July 13, 2026. All activities must align with DoD cybersecurity mandates and ensure readiness for CMMC Level 2 certification without reliance on third-party assessments.