This Government Contract opportunity from Department Of Defense was posted on July 17, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance & CMMC Assessment Support

Closed

Federal

Submission Closed07/22/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541611

New

DIBBS

Technical Data & Export Control Compliance ServicesThe contract pertains to the management of ITAR and EAR-controlled technical data with a focus on ensuring full compliance with U.S. export control regulations. It requires comprehensive services including strict access control protocols, specialized training programs, and ongoing monitoring to enforce restrictions on foreign nationals, ensuring that sensitive technical information is handled in accordance with federal law. The scope emphasizes operational procedures that safeguard controlled data across all stages of handling, from receipt and storage to dissemination and disposal, with particular attention to personnel vetting and security awareness. This is a subcontract under a Total Small Business Set-Aside, designated for small businesses as defined by the SBA, and falls under NAICS code 541611 for administrative management and general management consulting services. The work is contracted through the ASC Commodities Division of the Department of Defense, with a response deadline of August 7, 2026, and a posted date of July 27, 2026. Performance location details are unspecified, indicating flexibility or that the work may be conducted remotely or at multiple sites. The solicitation number is SPE4A626RXB74, and the contract is managed through the DIBBS platform, requiring interested parties to review and submit proposals through the official online portal.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Shipping Instruction Request ProcessingThe contract requires the preparation and submission of shipping instruction requests for each delivery order in full compliance with Defense Logistics Agency transportation and routing guidelines. This subcontract is designated as a total small business set-aside under the SBA program, ensuring eligibility is restricted to small businesses as defined by the FAR. The work is classified under NAICS code 541611, indicating it falls within management, scientific, and technical consulting services. The solicitation was posted on July 27, 2026, with a response deadline of August 7, 2026, and is managed by the ASC Commodities Division of the Department of Defense. All performance must adhere to DLA’s specific logistical protocols, though the exact place of performance and point of contact are not specified in the provided data.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Obsolete Materials ManagementThe contract titled Obsolete Materials Management is a subcontract under a Total Small Business Set-Aside, designated for small businesses as defined by the SBA under FAR 19.5, with a NAICS code of 541611 for management consulting services. It is issued by the ASC Commodities Division of the Department of Defense and requires the contractor to identify, report, and actively manage obsolete components within the supply chain. This includes sourcing viable alternatives for discontinued parts and coordinating engineering changes to ensure continuity of supply and compliance with operational requirements. The solicitation was posted on July 27, 2026, with a firm response deadline of August 7, 2026, and performance will be carried out in an undefined location under the purview of the contracting office.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Traceability Documentation ManagementThe contract requires comprehensive traceability documentation for all components used in cable assemblies, mandating full supply chain visibility from raw materials through final assembly. This includes maintaining and submitting material certifications and lot-level traceability records to ensure every part can be tracked back to its origin, verifying compliance with quality and regulatory standards. The requirement is critical for ensuring component authenticity, reliability, and accountability within defense-related applications. This is a small business set-aside subcontract under NAICS code 541611, issued by the ASC Commodities Division of the Department of Defense, with a posting date of July 27, 2026, and a response deadline of August 7, 2026. The work is expected to support defense supply chain integrity, though the specific place of performance and point of contact information are not provided. Interested parties must respond before the deadline to be considered for award, with all documentation required to meet stringent traceability protocols outlined in the solicitation.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Supply Chain Traceability and Documentation ServicesThe contract involves providing comprehensive supply chain traceability and documentation services to ensure full visibility and accountability across all stages of procurement and delivery. This includes meticulous tracking of components from origin through final integration, with specific requirements to manage and document the handling of superseded or obsolete parts to prevent unintended use. Strict compliance with sourcing restrictions is mandatory, particularly the avoidance of any materials or components originating from Xinjiang, in alignment with current U.S. federal guidelines. All activities must be thoroughly documented to support audit readiness and regulatory adherence. This is a subcontract under the Department of Defense’s ASC Commodities Division, with a NAICS code of 541611 indicating it falls under management consulting services. The solicitation was posted on July 27, 2026, and proposals are due by August 7, 2026. Performance location details are not specified, but the work is tied to defense supply chain integrity and must meet stringent federal compliance standards. The contract emphasizes transparency, rigorous recordkeeping, and adherence to emerging sourcing regulations, making it critical for contractors to demonstrate established protocols for ethical and legally compliant supply chain operations.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Quality Control and Documentation ServicesLoudoun Water is seeking a subcontractor to provide quality control and documentation services for construction or infrastructure projects, with a focus on the preparation and submission of as-built drawings, operations and maintenance manuals, product data sheets, and necessary certifications. The subcontractor may also be required to conduct internal quality inspections to ensure compliance with project specifications and industry standards. This contract is solicited under NAICS code 541611, which categorizes it as environmental consulting services, and is intended to support the accurate recording and delivery of project documentation essential for long-term facility management and regulatory compliance. The opportunity is open for responses until September 4, 2026, and interested parties must submit their proposals through the designated online portal prior to the deadline.

POSTED

DEADLINE

RFR 27-102 State Aid Review Facilitator

1007CONVD - MA Board of Library Commissioners

POSTED

DEADLINE

Prohibited Foreign Entity Compliance MonitoringThe contract requires active monitoring and enforcement of compliance with federal prohibitions against specific foreign entities, including Kaspersky, Huawei, DJI, and ByteDance, ensuring that all subcontractors and suppliers under the agreement do not engage with or utilize products or services from these restricted organizations. This obligation extends throughout the lifecycle of the subcontract, mandating ongoing due diligence, verification of supply chain integrity, and documentation of compliance measures to meet federal security standards. The scope applies to all tiers of subcontractors and suppliers, requiring robust internal controls and reporting mechanisms to prevent inadvertent or intentional use of prohibited technologies. This is a total small business set-aside under the SBA program, designated for firms classified as small businesses under NAICS code 541611, which pertains to management, scientific, and technical consulting services. The opportunity was posted on July 27, 2026, with a response deadline of August 3, 2026, and falls under the Department of Homeland Security’s SFLC Procurement Branch 1. The place of performance and detailed contact information are not specified, but the requirement is tied to federal contractual obligations and mandates strict adherence to U.S. government prohibitions on foreign adversary technology. All bidders must demonstrate prior experience in compliance monitoring, supply chain risk mitigation, and familiarity with federal restrictions on prohibited entities.

Sflc Procurement Branch 1(00080)

POSTED

DEADLINE

Small Business Subcontracting Compliance and Reporting SupportThe contract is for support services aimed at helping a prime contractor comply with Federal Acquisition Regulation requirements pertaining to small business subcontracting plans. This includes the full range of responsibilities such as tracking subcontractor performance, ensuring accurate reporting, and properly flowing down all required clauses to subcontractors. The effort is designed to ensure adherence to the Small Business Administration's Total Small Business Set-Aside criteria, reinforcing the government’s commitment to fostering small business participation in federal contracting. All activities must align with the NAICS code 541611, which corresponds to administrative management and general management consulting services, and must support the Department of Homeland Security’s SFLC Procurement Branch 1 in meeting its small business goals. The solicitation is strictly limited to small business concerns as defined by the SBA, and proposals must be submitted by the stated deadline of August 3, 2026. The work is performance-based and requires proactive management of subcontracting obligations, data accuracy, and compliance documentation throughout the contract lifecycle. Although specific location details for performance are not provided, the support will be delivered in support of a DHS acquisition and must satisfy all applicable federal compliance standards without exception. The contract’s structure emphasizes accountability, transparency, and sustained alignment with federal small business inclusion mandates.

Sflc Procurement Branch 1(00080)

POSTED

DEADLINE

C-SCRM Questionnaire Response Development and Validation SupportThe contract focuses on providing specialized support to vendors in developing and validating responses to the C-SCRM Questionnaire, ensuring alignment with NIST cybersecurity controls and government audit requirements. The effort is centered on helping contractors gather, organize, and present evidence that demonstrates robust supply chain risk management practices, enabling them to meet federal compliance standards. Guidance and validation services must be precise and tailored to satisfy the stringent documentation and evidentiary expectations of government reviewers, particularly those overseeing federal procurement and cybersecurity posture. This subcontract opportunity, issued by the U.S. Embassy Bangkok under the Department of State, requires timely delivery with responses due by August 11, 2026. The work falls under NAICS code 541611 for management consulting services, indicating an emphasis on advisory and implementation support rather than direct technical execution. The goal is to ensure vendors are not only compliant but also audit-ready, with clear traceability between questionnaire answers and NIST control implementations. Success requires deep familiarity with federal cybersecurity frameworks, supply chain risk methodologies, and the ability to translate technical controls into validated, government-acceptable documentation.

POSTED

DEADLINE

Supplier Mapping and Third-Party Risk VerificationThe contract seeks to identify and document multi-tier suppliers within the supply chain, with a focus on assessing their cybersecurity posture and verifying compliance with contractual supply chain risk management requirements, including adherence to FAR and DFARS standards. This effort is critical to ensuring that all third-party vendors, including sub-tier contractors, meet federal cybersecurity and risk mitigation benchmarks to protect sensitive government information and operations. The work requires detailed mapping of supplier relationships across multiple levels and conducting rigorous evaluations of security controls, policies, and procedures to confirm alignment with federal mandates. The contract is issued by the U.S. Embassy Bangkok under the Department of State and is classified as a subcontract with a NAICS code of 541611, indicating it relates to administrative management and general management consulting services. Proposals must be submitted by August 11, 2026, and the solicitation was posted on July 27, 2026. Although specific performance locations and point of contact details are not provided, the scope implies a global reach due to the international nature of the agency and the complexity of supply chain mapping across international tiers. Successful bidders will be expected to deliver comprehensive documentation and validation reports that demonstrate full compliance with federal security requirements and the ability to sustain ongoing oversight of supplier risk.

POSTED

DEADLINE

Cybersecurity Supply Chain Risk Management (C-SCRM) Compliance AssessmentThe contract requires the execution of comprehensive cybersecurity supply chain risk management assessments to identify, evaluate, and mitigate threats within the supply chain of the US Embassy Bangkok. This includes mapping critical suppliers and ensuring that all contractual agreements incorporate mandated C-SCRM requirements aligned with NIST SP 800-53 controls, specifically SR-7 for supply chain risk management and SA-4 for system and services acquisition. The work involves evaluating vendor practices, enforcing compliance with federal cybersecurity standards, and embedding protective measures into procurement and vendor management processes to safeguard sensitive data and operations. The solicitation is classified as a subcontract under NAICS code 541611, indicating services related to management consulting, and is issued by the Department of State. Responses must be submitted by August 11, 2026, with the opportunity posted on July 27, 2026. There is no set-aside designation specified, and performance location details are not provided, suggesting a flexible or distributed execution environment. The contractor is expected to deliver actionable findings and enforce compliance without direct oversight from the agency, relying on contractual language and technical alignment with NIST controls to ensure resilience across the supply chain.

US Embassy Bangkok

POSTED

about 18 hours ago

DEADLINE

in 14 days

AI Contract Overview

The contract is for third-party cybersecurity assessment and compliance support services aimed at ensuring the prime contractor meets CMMC Level 2 requirements for handling Controlled Unclassified Information. The work is subcontracted under the Department of Defense’s Active Devices Division and is specifically focused on verifying adherence to the Cybersecurity Maturity Model Certification framework as it applies to the protection of sensitive but unclassified data. The performance location is designated as Fort Stewart, Georgia, with a zip code of 31314-0000. The solicitation was posted on July 17, 2026, and responses are due by July 22, 2026, indicating a tight turnaround for proposal submissions. The NAICS code 541611 classifies the effort under Management Consulting Services, underscoring that the support is advisory and evaluative in nature, likely involving gap analysis, policy review, control implementation guidance, and readiness certification preparation. This subcontract will play a critical role in enabling the prime contractor to achieve and maintain CMMC Level 2 compliance, a mandatory requirement for Department of Defense contracts involving CUI.

General Info

Third-party cybersecurity support for CMMC Level 2 compliance at Fort Stewart, Georgia, due July 22, 2026.

Agency

Department Of Defense → ACTIVE DEVICES DIVISIONView Agency

NAICS

541611 - Administrative Management and General Management Consulting ServicesView NAICS

Place of Performance

FORT STEWART, GA, 31314-0000, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PhaseClosed

PostedJul 17

subcontract

Response DeadlineJul 22

Deadline has passed

Submission Closed

07/22/2026, 05:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → ACTIVE DEVICES DIVISION

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → ACTIVE DEVICES DIVISION

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Third-party assessment and compliance support to ensure the prime contractor meets CMMC Level 2 requirements for handling Controlled Unclassified Information (CUI).