Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Cybersecurity Compliance and CUI Protection

Closed
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512
New
SLED
Cybersecurity Maturity Model Certification (CMMC) Program Services
Solicitation # 09112026
The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.
University of Arkansas Fayetteville (UAF)

POSTED

about 2 hours ago

DEADLINE

N/A
NAICS: 541512
New
SLED
Pre-Solicitation for CSBP Business Modernization
Solicitation # OIS-25-26-020
The California Department of Consumer Affairs, through the State Board of Pharmacy, is seeking a contractor to modernize its business operations by replacing aging legacy systems with a cloud-based Software as a Service solution. This project, identified as solicitation OIS-25-26-020, aims to implement a comprehensive system for application, renewal, compliance, payment, inspection, and reporting. The contractor will be responsible for the design, configuration, integration, deployment, and ongoing maintenance of the solution using a hybrid-agile scrum methodology. The project is structured into four phases, with a base contract term of 36 months and a timeline spanning from October 2027 through October 2030. The solution must adhere to strict technical and security standards, including WCAG 2.2 Level AA for accessibility and NIST SP 800-53 Rev. 5 and the NIST Cybersecurity Framework for security. Compliance with FedRAMP and California SAM/SIMM policies is required, and the system must integrate with DCA/OIS Single Sign-On for role-based access control. Evaluation of bidders will be based on a point system regarding how functional requirements are met, favoring out-of-the-box capabilities over customization, and will include a cost evaluation covering base deliverables, maintenance, and continuous enhancements.
California Department of Consumer Affairs

POSTED

3 days ago

DEADLINE

in 28 days

AI Contract Overview

Show more

This contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information and ensure full compliance with DFARS 252.204-7012, which governs the protection of controlled unclassified information within the defense supply chain. The scope centers on establishing and maintaining a robust cybersecurity framework to meet federal mandates designed to prevent unauthorized access, disclosure, or compromise of sensitive defense data handled by subcontractors. All technical, administrative, and physical safeguards outlined in NIST SP 800-171 must be fully deployed, documented, and operational to meet the required compliance standard. The contract is issued as a subcontract under the Department of Defense through the Defense Logistics Agency, with performance required at Joint Base Lewis McChord, Washington, ZIP 98433-9500. It falls under NAICS code 541512 for computer systems design services, indicating the need for specialized technical expertise in cybersecurity implementation. Responses are due by July 24, 2026, following a posting date of July 13, 2026. There is no set-aside designation specified, and the contracting office has not provided a point of contact, so proposers must rely on the provided DIBBS portal link for further details and submission instructions. Compliance is non-negotiable, and failure to meet the NIST and DFARS requirements will result in disqualification or contract termination.

General Info

Implement NIST SP 800-171 controls to protect defense information per DFARS 252.204-7012 at Joint Base Lewis McChord by July 24, 2026.

NAICS

541512 - Computer Systems Design Services

Place of Performance

JOINT BASE LEWIS MCCH, WA, 98433-9500, USA

Set-Aside

NONE

Documents

This scope was carved out of SPE7L7-26-T-4280.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

BORESCOPE

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed
Posted

subcontract

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Defense Logistics Agency
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implementation of NIST SP 800-171 controls to protect covered defense information and ensure compliance with DFARS 252.204-7012.

More opportunities from Department Of Defense → Defense Logistics Agency

Same awarding agency

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS