This Subcontract opportunity from Department Of Defense was posted on July 9, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance and Incident Reporting

Closed

Federal

Submission Closed08/08/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

CIT01277069_System Implementation Services

Solicitation # WMATA-0000010968

The Washington Metropolitan Area Transit Authority is seeking proposals for System Implementation Services under solicitation number WMATA-0000010968. This procurement opportunity is categorized under NAICS code 541512, focusing on computer systems design services to support the agency's operational infrastructure. The solicitation was posted on November 13, 2026, and requires all responses to be submitted by the deadline of December 14, 2026, at 5:00 PM. Interested parties can access further details and manage their bids through the official WMATA supplier portal.

Washington Metropolitan Area Transit Authority

POSTED

DEADLINE

Concessionaire Data Integration Services

POSTED

DEADLINE

Pre-Advertisement Notice for Digital Revenue Intelligence and Value Engagement (DRIVE)

Solicitation # PE-66062-NONST-2027-000000524

The City of Atlanta Department of Aviation is initiating a procurement process for the Digital Revenue Intelligence and Value Engagement (DRIVE) platform. This project seeks an integrated, airport-wide solution designed to automate the real-time collection and analysis of line-item sales data from all airport concessionaires. The primary objective of the system is to improve revenue accuracy, transparency, and operational efficiency through the implementation of automated rent validation, menu compliance monitoring, audit workflows, and centralized reporting. The procurement will follow a Multi-Step Sealed Bid process, beginning with a prequalification phase where vendors will be evaluated based on their experience and product demonstrations. This will be followed by an Invitation for Bid (IFB). The solicitation, numbered PE-66062-NONST-2027-000000524, was posted on November 13, 2026, with a response deadline of December 4, 2026. Interested parties may contact Craig Frayall for further information, and a Pre-Solicitation Conference will be held to provide additional details and address vendor inquiries.

POSTED

DEADLINE

SFS Appliance Configuration and Installation

POSTED

DEADLINE

White Glove Configuration and Asset Tagging

Jefferson City Schools

POSTED

DEADLINE

System Integration & Migration Services

British Business Bank Plc

POSTED

DEADLINE

Enterprise Reporting & Data Lineage Implementation

British Business Bank Plc

POSTED

DEADLINE

South Dakota Immunization Information System (SDIIS)

Solicitation # 26RFP-27-0904002-003

The South Dakota Department of Health, in cooperation with the CDC, is soliciting proposals for software and professional services to implement and support a new internet-based Immunization Information System (SDIIS). The project involves replacing the existing system to provide authorized users with real-time access to input, analyze, and report immunization data. Key functional requirements include the ability to automate client de-duplication, manage vaccine inventory, integrate newborn screening data, and interface with the South Dakota Birth Registry, the Electronic Disease Surveillance System (Maven), and the State Health Information Exchange via HL7 and SOAP wrapped XML standards. Offerors may propose three hosting models: Vendor-Hosted, State-Hosted On-Premises, or State-Hosted Azure PaaS. The project is scheduled to begin on February 1, 2027, with a phased implementation including environment setup by June 1, 2027, interface development by October 29, 2027, and a final go-live and cutover date of March 2, 2028. Proposals are due by November 25, 2026. Award selection will be based on subjective judgment and a comparative assessment of qualified proposals. Contractors must adhere to strict security protocols, including fingerprint-based background checks for staff accessing protected health information, compliance with HIPAA and Federal Tax Information regulations, and the maintenance of at least $1 million in commercial general liability insurance. Acceptance of the final product is contingent upon passing web application vulnerability scans and successful User Acceptance Testing.

South Dakota State Government

POSTED

DEADLINE

Post Office Systems Integration

POSTED

DEADLINE

Oracle E-Business Suite (EBS) Current-State (As-Is) Assessment and Oracle Fusion Cloud Future-State (To-Be) Design

Solicitation # 123581

The Washington Suburban Sanitary Commission (WSSC) is soliciting proposals for solicitation number 123581 to perform an Oracle E-Business Suite (EBS) Current-State (As-Is) Assessment and Oracle Fusion Cloud Future-State (To-Be) Design. The project involves documenting current operations for Finance, Procurement, and HR, cataloging technical architecture and customizations, and conducting a fit-gap analysis to design an optimized future-state model using Oracle Fusion Cloud standard capabilities. All process documentation must adhere to BPMN 2.0 standards. The work is expected to be completed within a tentative 180 calendar days, with deliverables subject to approval by the Project Sponsor, WSSC Water IT, and other relevant department leads. This is a fixed-price milestone contract where award is based on the most advantageous proposal, with price accounting for 10 percent of the evaluation weight. Minimum qualifications include seven years of EBS experience and three years of Fusion Cloud experience. To be considered responsive, bidders must submit a technical proposal limited to 50 pages, a separate price proposal, and various certifications, including a Declaration of Non-Discrimination and OSDI participation forms. Notably, the awardee and its partners may participate in future Program Management and Organizational Change Management solicitations but are prohibited from serving as a prime or subcontractor in any future System Integrator solicitation for this program.

Information Technology Department

POSTED

DEADLINE

Computer Control System ImplementationCambridgeshire County Council is seeking a subcontractor for the implementation of a specialized computer control system designed for prime contractors managing street works coordination projects. The project involves the configuration and delivery of a fully operational system tailored specifically for Traffic Management Center operations, ensuring all technical specifications align with CPV 48151000 and the Authority's operational requirements. The procurement process for this subcontract began on November 13, 2026, with a response deadline set for December 11, 2026. This initiative falls under NAICS code 541512, focusing on the deployment of a robust control infrastructure to streamline the coordination of street works within the council's jurisdiction.

Cambridgeshire County Council

POSTED

about 9 hours ago

DEADLINE

in 28 days

AI Contract Overview

This subcontract, titled Cybersecurity Compliance and Incident Reporting, is issued by the Department of Defense under the Active Devices Division. The primary objective of the agreement is the implementation and ongoing maintenance of security controls aligned with NIST SP 800-171 standards. The contractor is responsible for the detection of cyber incidents and must ensure strict adherence to DFARS 252.204-7012 regulations. A critical requirement of this contract is the mandatory reporting of cyber incidents via DIBNet within 72 hours of discovery. The opportunity was posted on July 9, 2026, with a response deadline of August 8, 2026. It falls under NAICS code 541512, focusing on computer systems design services to ensure the security and integrity of defense-related data.

General Info

DoD subcontract for NIST SP 800-171 compliance and 72-hour cyber incident reporting.

Agency

Department Of Defense → ACTIVE DEVICES DIVISION

NAICS

541512 - Computer Systems Design Services

Place of Performance

USA

Set-Aside

NONE

Documents

This scope was carved out of SPE7M5-26-R-0014.

The full solicitation package (6 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

FILTER,RADIO FREQUE

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 9

subcontract

Response DeadlineAug 8

Deadline has passed

Submission Closed

08/08/2026, 05:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → ACTIVE DEVICES DIVISION

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → ACTIVE DEVICES DIVISION

Office AddressN/A

ContactsNo contact information available

Full Description

Implement and maintain NIST SP 800-171 security controls, detect cyber incidents, and report via DIBNet within 72 hours as required by DFARS 252.204-7012.