This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance and CUI Safeguarding

Closed

Federal

Submission Closed07/24/2026, 10:00:00 AM PDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Enterprise IWMS/CAFM Administration and Rollout

POSTED

DEADLINE

AMC/A6 Information Technology Needs Commercial Solutions Opening (CSO) - Amendment 04

Solicitation # FA445226SC001

The Air Mobility Command A6 Information Technology Needs Commercial Solutions Opening, solicitation FA445226SC001, is a competitive solicitation managed by the 763rd Enterprise Sourcing Squadron to obtain innovative IT solutions for secure and scalable infrastructure transformation. While the overarching CSO is unrestricted, the specific Area of Interest for Base IT Modernization is set aside exclusively for Service-Disabled Veteran Owned Small Businesses. The primary objective is to overhaul outdated legacy systems to improve operational efficiency, data sharing, and warfighter effectiveness by integrating modern technologies across core, cloud, and edge environments. The scope of work includes an initial site survey, design, full installation, and system acceptance testing, culminating in a seamless turnover with as-built documentation and government training. The acquisition follows a two-step selection process consisting of an initial white paper submission followed by a detailed approach by invitation. White papers are evaluated based on technical merit and importance to the agency. The government anticipates awarding Firm-Fixed Price contracts, though it reserves the right to use Other Transaction for Prototype Projects. Key requirements include a Secret facility clearance and Secret eligibility for all personnel, enrollment in continuous vetting, and compliance with the Risk Management Framework to achieve an Interim Authority to Test. The CSO remains open until February 26, 2031, with specific submission deadlines established for individual Areas of Interest.

POSTED

DEADLINE

SCADA and Instrumentation ModernizationThe SCADA and Instrumentation Modernization subcontract, issued by Garney Pacific, Inc., focuses on the installation and integration of instrumentation and monitoring systems for facility oversight projects within the City of San Diego. The primary objective is to modernize facility tracking and control by replacing outdated systems with a fully functional monitoring array and updated instrumentation. This opportunity is specifically set aside for small businesses, including certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone small businesses. Interested parties must respond by December 10, 2026, under NAICS code 541512.

POSTED

DEADLINE

Fleet/Asset Tracking Services

Pakistan State Oil Company Ltd

POSTED

DEADLINE

Genesys Value Added Reseller (VAR) Professional ServicesThis subcontract opportunity is for the provision of application support and professional services to prime contractors working on projects for the California Franchise Tax Board. The selected provider will be responsible for technical support, configuration, optimization, and troubleshooting specifically within the Genesys CCP environment. To be eligible for this engagement, the contractor must maintain status as a recognized Genesys Value Added Reseller. The scope of work involves delivering a combination of technical support hours and specific professional service deliverables under NAICS code 541512. Interested parties should note that the response deadline is January 1, 2027, with the project falling under the jurisdiction of the State of California.

POSTED

DEADLINE

BMS and ACS redundancy, backup and disaster recovery solutions

Solicitation # UNDP-VNM-02436

UNDP Viet Nam is seeking proposals from Vietnamese-based firms to implement redundancy, backup, and disaster recovery solutions for its Building Management System and Access Control System. The primary objective is to enhance business continuity and disaster recovery preparedness by eliminating single-host recovery limitations and establishing recoverable replicas of virtual machines. The required solution must include dedicated backup storage for independent retention, offline backup capabilities, and demonstrated failover and failback functionality. Selected providers will be responsible for delivering comprehensive documentation, monitoring requirements, and operational runbooks, while ensuring a successful knowledge transfer. Additionally, the contractor must validate all necessary Microsoft, SQL, and application licensing. Interested suppliers are required to submit their offers through the official UNDP online system, ensuring they are registered and subscribed to the specific tender for any potential amendments.

POSTED

DEADLINE

RFQ for the Development of the Digital Registration Platform for Low-Power Devices SIGET - El Salvador (Pilot ES-01) [email hidden]

Solicitation # RFQ-S-BDT-2026-093

The International Telecommunication Union is seeking quotations for the development of the Digital Registration Platform for Low-Power Devices SIGET as a pilot project in El Salvador. Interested companies must submit their proposals through the In-tend e-tendering platform, ensuring that the final quotation is provided as a single PDF file written in both English and Spanish. The deadline for clarification requests is November 17, 2026, and the final submission deadline is November 23, 2026, at 14:00 Geneva time. The contract will be awarded to the technically compliant bidder offering the lowest price. Quotations should preferably be in Swiss Francs, though Euros and US Dollars are also accepted, and must remain valid for at least 90 days. Payment is generally issued within 30 days of deliverable acceptance and invoice receipt, with advance payments requiring specific justification and prior approval. By participating, bidders agree to the ITU General Conditions of Contract and must maintain strict confidentiality regarding provided information.

POSTED

DEADLINE

RFP 11159.46 Airport Identity Management System and Maintenance and Support Services

Solicitation # 11159.46

Solicitation 11159.46 is a Request for Proposals issued by the City and County of San Francisco for the San Francisco International Airport to procure an Airport Identity Management System (AIDMS) and associated maintenance and support services. The scope of work is divided into two primary phases: the first involves the design, installation, implementation, integration, and testing of the system software and hardware, and the second focuses on ongoing warranty, maintenance, and support. The project requires the contractor to provide comprehensive training and user documentation, as well as recommendations for workstations and peripherals. Final system acceptance is contingent upon the successful completion of all implementation phases and a 60-day stabilization test period. The procurement process utilizes a scored evaluation based on 100 possible points, preceded by a pass/fail screening of minimum qualifications. To qualify, proposers must be the original manufacturer of a commercially off-the-shelf system, not a reseller, and demonstrate at least two successful AIDMS implementations and five years of continuous support experience at medium or large hub U.S. airports. The contract includes strict compliance requirements, including adherence to San Francisco Administrative Code, prevailing wage laws, ADA and WCAG 2.1 Level AA accessibility standards, and DHS/CISA vulnerability management guidelines. Additionally, the agreement prohibits the use of generative artificial intelligence in deliverables without prior written approval and requires key personnel accessing personally identifiable information to maintain SFO badges. Proposals must be submitted via the OpenGov portal by December 4, 2026, and must remain valid for 180 days.

POSTED

DEADLINE

Solicitation # BPM059590

The Maryland Department of Health Developmental Disabilities Administration is soliciting proposals under RFP OCMP-27-25800 for a secure, scalable cloud-based data analytics capability. This single-award, firm-fixed-price contract is intended to transform state-held claims and program data into actionable insights through a three-tier analytics framework utilizing deterministic rules, statistical outlier modeling, and network analysis. The project aims for full completion by June 30, 2027, with an estimated budget of 5 million dollars in general funds. Key deliverables include the development of executive dashboards, repeatable analytical workflows, and a comprehensive implementation schedule covering mobilization through operational transition. The procurement process utilizes a two-part evaluation where technical factors are weighted more heavily than financial factors. Qualified offerors must demonstrate at least three years of experience in data analytics, specifically within healthcare or Medicaid programs, and provide key personnel including a Project Manager and Subject Matter Experts. Submissions must be made via the eMMA portal in separate technical and financial volumes. The solicitation mandates a 7 percent Minority Business Enterprise and a 1 percent Veteran-Owned Small Business Enterprise participation goal. Additionally, the successful contractor must adhere to State of Maryland DoIT information security policies and ensure personnel complete required CJIS background clearances.

POSTED

DEADLINE

IT Systems Development and Integration ServicesThis subcontract for IT Systems Development and Integration Services supports prime contractors on digital infrastructure projects for the Department for Communities. The scope of work focuses on the development of business intelligence software, the execution of system implementation planning, and the provision of expert technical systems consultancy. Key deliverables include the creation of functional software modules, the delivery of integrated systems, and the production of comprehensive technical implementation plans. The opportunity was posted on November 9, 2026, with a response deadline of December 7, 2026. Classified under NAICS code 541512, the contract is designed to enhance the agency's digital capabilities through specialized software engineering and systems integration expertise.

Department for Communities

POSTED

DEADLINE

AV System Design and InstallationThis subcontract for AV System Design and Installation involves providing modern audio-visual solutions for prime contractors working on MASS DEP facility projects in Lakeville, MA. The scope of work includes recommending and installing hardware for huddle, medium, community, and large conference rooms, specifically covering displays, microphones, cameras, speakers, and controllers. All work must adhere to established Audio Visual Standards and comply with EOTSS Security Standards for cloud software. The project requires the delivery of fully operational AV systems across 10 rooms, backed by a 5-year warranty. Managed under the Executive Office of Energy and Environmental Affairs for the state of Massachusetts, the contract is categorized under NAICS code 541512. Interested parties should note the response deadline of December 9, 2026.

Executive Office of Energy and Environmental Affairs

POSTED

about 20 hours ago

DEADLINE

in 29 days

AI Contract Overview

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect Covered Defense Information associated with the GEAR CLUSTER production and delivery lifecycle. This includes establishing and sustaining a secure environment that meets federal standards for safeguarding Controlled Unclassified Information throughout all phases of operations, from manufacturing and logistics to documentation and data handling. Compliance must be demonstrated through documented processes, continuous monitoring, and adherence to strict access, audit, and incident response protocols defined under the NIST framework. The work is to be performed at Port Hueneme, California, with a submission deadline of July 24, 2026, and is categorized as a subcontract under the NAICS code 541512 for Computer Systems Design Services. The contracting entity is the Department of Defense through the Land Supply Chain organization, emphasizing the critical nature of cybersecurity in supporting defense logistics and supply chain integrity. All activities must align with Department of Defense expectations for CUI protection, ensuring no compromise to sensitive data during production, transit, or storage within the designated performance location.