This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance and CMMC Level 2 Support

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Business Intelligence and Data Analytic Solutions

Solicitation # 27-12P

Solicitation 27-12P is a cooperative procurement issued by 1GPA, with Mary C. O'Brien Accommodation School/Pinal County ESA serving as the lead agency, to secure Business Intelligence and Data Analytic Solutions. The contract seeks commercially available products and platforms for data analytics, visualization, management, and decision support, including related professional services such as data governance and training. This agreement is designed to replace contract 22-04P upon its expiration on March 8, 2027, which is also the scheduled start date for the new initial one-year term. The contract allows for unilateral month-to-month extensions or mutual extensions for up to 48 months in 12-month increments. Annual usage is estimated at 1.5 million dollars, though no guaranteed quantities are provided. Eligible users include a wide range of public agencies, such as school districts, universities, and local or federal government entities. Proposals are evaluated on a point system focusing on cost, solution capabilities, experience, marketing plans, and responsiveness. Awarded contractors must adhere to strict data security and privacy regulations, including FERPA, HIPAA, and HITECH, and provide a one-year general quality warranty. Key administrative terms include Net 30 payment terms, a requirement for professional liability insurance of 1 million dollars, and compliance with various federal and state mandates, including 2 CFR 200 for federal grant funds and specific certifications regarding forced labor and the boycott of Israel.

POSTED

DEADLINE

Health Risk Assessment (HRA) & Biometric IntegrationThis subcontract focuses on the design and integration of Health Risk Assessments and biometric data for employee wellness projects within the City of Phoenix. The selected provider will work with prime contractors to implement PCP Attestation and integrate biometric data into a platform designed to generate administrative functionality and participant reporting. The project requires the delivery of a fully integrated HRA solution and biometric reporting system. Due to the nature of the health data involved, HIPAA Certification is a mandatory requirement for the performing entity. This opportunity is managed through Finance Central Procurement in Arizona, with a response deadline of December 10, 2026.

Finance Central Procurement

POSTED

DEADLINE

Wellness Platform Software Development & HostingThis subcontract for Wellness Platform Software Development and Hosting involves the creation and hosting of a secure digital wellness portal for prime contractors working on City of Phoenix employee wellness projects. The selected provider is responsible for developing and maintaining a web portal that features robust administrative capabilities while ensuring high standards of security, usability, and accessibility. Key technical responsibilities include managing the overall configuration and data management to deliver a fully functional system. To qualify for this project, the contractor must hold HIPAA Certification and successfully pass the City of Phoenix Data Privacy Risk Screening. Managed by Finance Central Procurement in Arizona under NAICS code 541512, the solicitation was posted on November 5, 2026, with a response deadline of December 10, 2026.

Finance Central Procurement

POSTED

DEADLINE

Accounts Payable (AP) Automation and EDI ServicesThis subcontract for the DeKalb County School District involves the supply and implementation of an automated accounts payable and EDI services system designed for prime contractors. The scope of work focuses on executing B2B automation software, facilitating ACH vendor payments, and providing credit card payment solutions that include rebates to ensure a functional electronic payment process. The selected provider must maintain Professional Liability Insurance with a minimum limit of 2,000,000 dollars. This project falls under NAICS code 541512, with a response deadline set for December 10, 2026.

Dekalb County School District

POSTED

DEADLINE

Inventory: All in-one inventory mgmt. software

Solicitation # EV00000992

The Oklahoma Department of Agriculture, Food, and Forestry is soliciting a comprehensive, all-in-one inventory and order management system for the Forest Regeneration Center. The selected supplier will be responsible for reviewing existing seedling inventory and sales systems to implement a tracking system that supports e-commerce, point-of-sale transactions, and automated shipping and pickup fulfillment. A key requirement is the integration of the new system with the center's existing WooCommerce online store. The supplier must also provide a specialist to assist with implementation, data migration, onboarding, and live support. Bidders must submit a firm, fixed price for the contract term via the Oklahoma Supplier Portal by November 26, 2026. Proposals will be evaluated based on the ability to meet specifications, the number of requested exceptions to state terms—which should not exceed 10%—and the provision of required Authorization to Operate (ATO) documentation. Required bid components include a cover page, company information, pricing, and various certifications, including non-collusion and insurance certificates from carriers with an A.M. Best rating of A- or better. Payment for services is set at net 45 days following customer acceptance of deliverables at the destination.

Oklahoma Department of Agriculture

POSTED

DEADLINE

ECG Data Transmission and Integration ServicesThe ECG Data Transmission and Integration Services subcontract involves the setup and configuration of secure transmission systems for prime contractors working on County medical equipment projects. The scope of work focuses on configuring the secure transmission of ECG studies, integrating data acquisition hardware with result access systems, and implementing clinical workflow interfaces. All deliverables must adhere to healthcare data standards and maintain strict HIPAA compliance to ensure a functional and secure data transmission pipeline for ECG results. This opportunity is associated with the Health - SMMC agency in California under NAICS code 541512. The project was posted on November 5, 2026, with a response deadline of December 2, 2026. Interested parties can find further details through the provided procurement portal link.

POSTED

DEADLINE

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and the Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern Laboratory Information Management Services platform for the Jody Connor Limnology Center. This new system must document, track, and retain physical, chemical, and biological water quality data throughout standard laboratory procedures, including sample receipt, analysis, and quality control. A critical requirement is the implementation of a two-way connection and synchronization with the Oracle-based Environmental Monitoring Database to ensure the automated flow of completed records. The solution must be an industry-standard LIMS or similar technological approach, compatible with Zebra ZD220 TTLabel printers, and capable of managing complex sample preservation and container requirements. This Firm Fixed Price solicitation, identified as RFP 2026-093, requires strict adherence to cybersecurity standards, including NIST SP 800-171, 800-53 Moderate level controls, and 800-63. Vendors are evaluated on a weighted scoring system totaling 110 points, with significant emphasis on technical solutions, staffing qualifications, and GovRAMP or FedRAMP authorization status. The project includes deliverables such as a detailed work plan, data conversion, system installation, and staff training, with a production go-live goal for early 2028. Proposals must be submitted electronically in searchable PDF format, with price and technical volumes separated to ensure a blind technical review.

Department Of Environmental Services

POSTED

DEADLINE

Parking Enforcement Systems IntegrationThe Parking Enforcement Systems Integration subcontract involves providing technical integration services for prime contractors working on City of Surrey projects in Canada. The primary objective is to connect mobile payment applications with existing parking enforcement systems through the development of APIs and data bridges, ensuring that payment statuses are synchronized in real time for enforcement officers. The scope of work includes the execution of comprehensive test plans to verify data accuracy and the resolution of any integration defects. The successful contractor is responsible for delivering fully tested integrations along with a final test results report. This opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026.

POSTED

DEADLINE

Parking Mobile Payment App

Solicitation # 1220-030-2026-056

The City of Surrey is soliciting proposals for a Parking Mobile Payment App to maintain continuity of its current services while integrating new innovations and value-added capabilities. The scope of work includes the provision of software, configuration, integration, training, and ongoing support. Key deliverables include a detailed implementation and transition plan. The solution must adhere to strict security and privacy standards, specifically the Payment Card Industry Data Security Standard (PCI DSS) and British Columbia privacy legislation, including a mandatory Privacy Impact Assessment. Proposals will be evaluated based on the proponent's experience, reputation, resources, technical capabilities, and financial proposals, with the City reserving the right to select the most advantageous offer rather than the lowest price. Financial proposals must cover three specific transaction fee scenarios: contractor exclusivity, non-exclusivity, and end-user payment of fees. The contract includes a term that can be extended for up to four additional one-year periods. Payment terms require parking fees to be remitted by the 15th day of the following month, and the City maintains the right to terminate or reduce services if funds are not appropriated for the current fiscal year. Contractors must maintain Workers Compensation Board coverage and a safety program meeting occupational health and safety requirements. The City also retains the right to inspect personal information and management policies at the contractor's premises. Proposals must be submitted as a single PDF file to the procurement office by the deadline.

POSTED

DEADLINE

LMS Technical Integration and Support ServicesThe LMS Technical Integration and Support Services subcontract focuses on providing essential technical setup, network integration, and continuous support for prime contractors managing City of Dallas LMS projects. The scope of work includes executing network integration, conducting user training, and performing driver updates in strict accordance with the Technology Reference Architecture Checklist. The ultimate goal is to deliver a fully integrated and functional LMS platform supported by active technical assistance. To ensure operational success, the contractor will provide technicians for both on-site and remote service support. This engagement falls under NAICS code 541512 and is managed through the City of Dallas. Interested parties should note the response deadline of December 11, 2026, to provide these specialized integration and maintenance services.

POSTED

DEADLINE

EdTech Integration for World Language MaterialsThis subcontract for EdTech Integration for World Language Materials involves providing and configuring digital infrastructure for prime contractors supporting Atlanta Public Schools. The scope of work focuses on integrating digital textbooks and language learning software into the district learning management system, configuring single sign-on accounts, and ensuring all systems are interoperable with district hardware. All technical implementations must strictly adhere to FERPA and COPPA standards to ensure student data privacy and security. The project is categorized under NAICS code 541512 and aims to deliver a fully integrated digital learning environment for K-12 World Language projects. Interested parties should note that the solicitation was posted on November 5, 2026, with a response deadline of December 7, 2026.

Atlanta Public Schools

POSTED

about 17 hours ago

DEADLINE

in about 1 month

AI Contract Overview

A subcontract is in place to provide expert cybersecurity consulting services focused on achieving CMMC Level 2 compliance for the Defense Logistics Agency under the Department of Defense. The contractor is responsible for developing a System Security Plan, managing the Plan of Action and Milestones, and ensuring full audit readiness through rigorous documentation, policy alignment, and procedural implementation. The work supports critical defense infrastructure by institutionalizing cybersecurity controls per the CMMC framework, with tasks centered on operationalizing compliance rather than just theoretical adherence. The subcontract was posted on July 14, 2026, with NAICS code 541512 denoting computer systems design and related services, indicating the technical nature of the support required. All performance activities are aligned with federal cybersecurity mandates and are intended to prepare the organization for third-party CMMC assessments.