This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance & CUI Protection Services

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

International

PEP Implementation Testing Services

Sheffield Health Partnership University NHS Foundation Trust

POSTED

DEADLINE

PN365 - Patient Engagement Portal

Solicitation # C487615

The Sheffield Health Partnership University NHS Foundation Trust is seeking a single supplier to provide a Patient Engagement Portal (PEP) for patient administration. This procurement is conducted via the G-Cloud 15 framework and is noted as being particularly suitable for small and medium-sized enterprises. The system must be fully operational and in live use by March 31, 2027, with the supplier responsible for all necessary testing and training prior to this date. The estimated contract value is 300,000 GBP including VAT, with an initial performance period from January 6, 2027, to January 5, 2031, and an option to extend for an additional two years until January 5, 2033. The selection process follows a competitive flexible procedure consisting of three stages: an initial shortlist via the G-Cloud 15 Digital Platform, a formal tender submission, and a final demonstration for the top three scoring tenderers. Award decisions are based on a weighted evaluation comprising technical quality at 40%, commercial price at 30%, the demonstration at 20%, and social value at 10%. Submissions must be made in English via the Atamis portal by November 26, 2026, and the contract stipulates a 30-day payment term.

Sheffield Health Partnership University NHS Foundation Trust

POSTED

DEADLINE

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Electronic Committee Management System (ECMS).

Solicitation # CCBC/PS3024/26/GH

Caerphilly County Borough Council is seeking tenders for the provision, implementation, support, and maintenance of a secure, cloud-hosted Electronic Committee Management System (ECMS). This system is intended to modernize the administration of democratic services by facilitating the creation, management, publication, and archiving of committee agendas, reports, minutes, and decisions. Key functional requirements include committee and calendar management, decision tracking, a public-facing publication portal, and secure access via desktop, tablet, and mobile devices. The solution must integrate with Microsoft 365 and other council systems, featuring role-based access controls and audit reporting. Crucially, the system must be fully bilingual in English and Welsh to ensure compliance with Welsh Language Standards, accessibility requirements, data protection legislation, and recognized security standards. The contract is scheduled to run from November 1, 2027, to October 31, 2032, with a possible five-year extension option renewed annually, potentially extending the term to November 1, 2037. The procurement is being conducted under a Competitive Flexible Procedure per the Procurement Act 2023, with a multi-stage evaluation weighted toward demonstrations (45%), quality questions (35%), and price (20%). The successful supplier will be responsible for system configuration, data migration, user acceptance testing, and comprehensive training for administrators, officers, and elected Members. Payment terms are set at 30 days, and the submission deadline for tenders is December 11, 2026.

Caerphilly County Borough Council

POSTED

DEADLINE

Послуги з доопрацювання та розширення функцій інформаційно-комунікаційної системи «е-Тернопіль» на базі комп’ютерної програми «Єдина інформаційно-аналітична система управління ресурсами та взаємодії з громадою в м.Тернопіль» («ЄІАСУРВГ»), а саме розробки

Solicitation # UA-2026-11-10-011367-a

The Ternopil City Council is seeking services for the refinement and expansion of the e-Ternopil information and communication system. This project focuses on developing additional functions based on the Unified Information and Analytical System for Resource Management and Community Interaction in Ternopil. The initiative is part of the Ternopil Municipal Territorial Community Informatization Program for 2025-2027. This procurement is being conducted by a local self-government body under specific regulations that allow for the protection of intellectual property rights. The project will be executed within the city of Ternopil, Ukraine, and is managed by the Ternopil City Council to enhance the digital infrastructure and community interaction capabilities of the region.

Тернопільська міська рада

POSTED

DEADLINE

Enterprise IWMS/CAFM Administration and RolloutThe Enterprise IWMS/CAFM Administration and Rollout is a subcontract opportunity with NAVSEA HQ under the Department of Defense, performed at the Washington Navy Yard. The project focuses on the administration, configuration, and rollout of the ARCHIBUS production database for prime contractors involved in Enterprise Workspace Management. Key technical responsibilities include managing user account lifecycles, security groups, roles, and Virtual Private Archives, as well as configuring organizational GeoHierarchies utilizing Agile delivery methodology. The successful contractor is responsible for delivering a fully configured ARCHIBUS production database and comprehensive Site Rollout Completion Packages. Due to the nature of the work, personnel are required to hold a Tier 3 background investigation. The solicitation is categorized under NAICS code 541512, with a response deadline set for December 4, 2026.

POSTED

DEADLINE

Multi-Tenant Data Architecture & Management

Defense Information Systems Agency

POSTED

DEADLINE

Cross-Domain Solutions (CDS) & Data Integration

Defense Information Systems Agency

POSTED

DEADLINE

DevSecOps & High-Impact Cloud Engineering

Defense Information Systems Agency

POSTED

DEADLINE

Palantir & Workday Platform Support

Defense Information Systems Agency

POSTED

DEADLINE

AMC/A6 Information Technology Needs Commercial Solutions Opening (CSO) - Amendment 04

Solicitation # FA445226SC001

The Air Mobility Command A6 Information Technology Needs Commercial Solutions Opening, solicitation FA445226SC001, is a competitive solicitation managed by the 763rd Enterprise Sourcing Squadron to obtain innovative IT solutions for secure and scalable infrastructure transformation. While the overarching CSO is unrestricted, the specific Area of Interest for Base IT Modernization is set aside exclusively for Service-Disabled Veteran Owned Small Businesses. The primary objective is to overhaul outdated legacy systems to improve operational efficiency, data sharing, and warfighter effectiveness by integrating modern technologies across core, cloud, and edge environments. The scope of work includes an initial site survey, design, full installation, and system acceptance testing, culminating in a seamless turnover with as-built documentation and government training. The acquisition follows a two-step selection process consisting of an initial white paper submission followed by a detailed approach by invitation. White papers are evaluated based on technical merit and importance to the agency. The government anticipates awarding Firm-Fixed Price contracts, though it reserves the right to use Other Transaction for Prototype Projects. Key requirements include a Secret facility clearance and Secret eligibility for all personnel, enrollment in continuous vetting, and compliance with the Risk Management Framework to achieve an Interim Authority to Test. The CSO remains open until February 26, 2031, with specific submission deadlines established for individual Areas of Interest.

POSTED

DEADLINE

Solicitation # 622775913

The Defense Information Systems Agency (DISA) is seeking sources for the All-Domain Adaptive Platforms and Technologies Support (ADAPTS) Indefinite-Delivery/Indefinite-Quantity (ID/IQ) Single Award contract. This effort, with an estimated value of 500 million dollars, aims to provide administration and management support for DISA Services Platforms and business intelligence capabilities. The scope of work includes sustained operations, continuous software integration, and platform-as-a-service (PaaS) engineering across the DISA Connect customer access portal, ServiceNow, Salesforce, Workday, and Palantir platforms. Key technical requirements include DevSecOps deployment in DoD/DoW Impact Level 6 or higher cloud environments, the implementation of Cross-Domain Solutions, and the management of API gateways and multi-tenant data layer architectures. The contract anticipates a ten-year ordering period, with a base period from February 3, 2028, to February 2, 2033, and an option period extending to February 2, 2038. Performance will occur at the contractor's site and DISA Headquarters in Fort Meade, Maryland. Strict security and certification standards apply, requiring the contractor to maintain CMMC Level 2 certification and a final Top Secret Facility Security Clearance. All personnel must be U.S. citizens holding active Secret, Top Secret, or TS/SCI clearances. The procurement is categorized under NAICS 541512 with a size standard of 34 million dollars, and responses must demonstrate compliance with FAR clause 52.219-14 regarding limitations on subcontracting.

Defense Information Systems Agency

POSTED

about 8 hours ago

DEADLINE

in 20 days

AI Contract Overview

The Cybersecurity Compliance and CUI Protection Services subcontract, issued by the Defense Logistics Agency under the Department of Defense, focuses on the implementation and maintenance of NIST SP 800-171 cybersecurity controls. The primary objective of this engagement is to secure systems that handle covered defense information and ensure the protection of Controlled Unclassified Information. Classified under NAICS code 541512, the contract involves specialized computer systems design services to maintain rigorous security standards. The project was posted on July 13, 2026, and is managed through the Defense Logistics Agency to ensure that all defense-related data remains compliant with federal cybersecurity mandates.