Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Cybersecurity Compliance & Incident Reporting

Closed
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512
New
SLED
Cybersecurity Maturity Model Certification (CMMC) Program Services
Solicitation # 09112026
The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.
University of Arkansas Fayetteville (UAF)

POSTED

about 6 hours ago

DEADLINE

N/A
NAICS: 541512
New
International
IT Security Professional Services Under the Task-Based Services Supply Arrangement
Solicitation # 202703271
Public Safety Canada is seeking task-based IT security professional services under the Task-Based Informatics Professional Services Supply Arrangement to support cybersecurity initiatives in the National Capital Region. The scope of work includes performing security assessments, authorizations, architecture reviews, penetration testing, remediation validation, and incident-readiness packaging for departmental systems, cloud services, and networks. All work must align with Government of Canada policies and Communications Security Establishment guidance, specifically ITSG-33. The contract is structured around specific Task Authorizations, with payments tied to the acceptance of objective deliverables such as incident response plans, threat models, and validated remediation reports rather than elapsed time. The procurement is a Tier 1 solicitation open to invited TBIPS SA holders. The evaluation process is based on a combined rating of 70 percent technical merit and 30 percent price. The initial contract period runs from the date of award until March 31, 2027, with an irrevocable option for two additional one-year extensions. Required resources include various levels of IT security analysts, design specialists, and incident management specialists. Bidders must maintain valid organization security clearances, adhere to strict non-disclosure agreements, and provide proof of insurance within ten days of the award.
Department of Public Safety and Emergency Preparedness

POSTED

about 18 hours ago

DEADLINE

in about 1 month
NAICS: 541512
New
SLED
Statewide Workforce Lifecycle Tracking System for Infrastructure Projects (NY Builds)
Solicitation # Z-142
The New York State Department of Labor is soliciting bids under IFB Z-142 for the implementation and maintenance of NY Builds, a statewide workforce lifecycle tracking system for infrastructure projects. This holistic talent management solution is designed to integrate employers, state agencies, and job seekers into a shared view of labor demand and supply, ensuring a skilled workforce is available for major infrastructure builds. The contract requires the provision of Eightfold AI Inc. software or an equivalent product that is interchangeable in performance and design. The resulting agreement will be an estimated quantity contract where items are purchased on an as-needed basis, with an anticipated start date of March 31, 2027, and a term of up to five years, potentially extendable by twelve months. This opportunity is reserved exclusively for Service-Disabled Veteran-Owned Businesses (SDVOBs), with a 100 percent goal, while also maintaining minority and women-owned business enterprise goals of 15 percent each. The award will be granted to the responsive and responsible bidder who offers the total best value, defined as the lowest grand total bid among those who pass a mandatory eligibility screening. Technical requirements include support for the NY.GOV Authentication System for single sign-on and compliance with the New York State Information Security Policy. Bidders must submit their proposals in three separate sealed volumes—technical, cost, and administrative—by December 9, 2026.
NYS Department of Labor

POSTED

about 18 hours ago

DEADLINE

in about 1 month
NAICS: 541512
New
International
TBIPS SAP Technical and Functional RFP
Solicitation # 1000560706
The Canada Border Services Agency (CBSA) is seeking highly specialized IT professional resources to support the SAP Systems Management Division within the Finance and Corporate Management Branch. This requirement, identified by solicitation number 1000560706, is intended to result in the award of two separate contracts: one for SAP Technical services and one for SAP Functional services. The technical scope includes ERP Programmer and Analyst roles focusing on SAP BTP, Finance, BPC, BW, Analytics, and BASIS, while the functional scope covers SAP Generalists and specialists in Plant Maintenance, Security, Project Systems, and Public Sector Collection and Disbursement. The procurement is restricted to Tier 1 holders of the Task Based Informatics Professional Services (TBIPS) Supply Arrangement under EN578-170432. The proposed period of performance runs from February 1, 2027, to January 31, 2028, with work primarily performed onsite at CBSA facilities in the National Capital Region, specifically in Ottawa. Strict security requirements are in place, requiring the contractor to maintain a Secret Facility Security Clearance and Protected B Document Safeguarding capability, with all assigned personnel requiring Secret security clearance. All inquiries and proposals are managed by the contracting authority, Sasha Daoust.
Canada Border Services Agency

POSTED

about 18 hours ago

DEADLINE

in 25 days
NAICS: 541512
New
SLED
Airport Digital Twin Platform Implementation and Support Services
Solicitation # 2027-006-RFP
The Sanford Airport Authority is seeking a qualified Solution Provider under solicitation 2027-006-RFP to implement and support an Airport Digital Twin Platform and an open, standards-based ecosystem for the Orlando Sanford International Airport. The primary objective is to integrate disparate operational, maintenance, and facility systems into a common digital environment to enhance asset management, operational awareness, and facility stewardship. The initial phase of the project will focus specifically on terminal and airfield asset management, emphasizing performance monitoring and preventive, corrective, and predictive maintenance. The platform must utilize open standards, APIs, and middleware to ensure interoperability and incorporate spatial data such as GIS, CAD, BIM, and LiDAR imagery. Proposals are due by November 23, 2026, with a scheduled board award date of February 2, 2027. Evaluation is based on a points-weighted system considering the technical approach, implementation roadmap, experience, key personnel, training and sustainability, and the five-year cost of ownership. Mandatory minimum qualifications include registration with the Florida Department of State and compliance with Florida statutory requirements regarding scrutinized companies and public entity crimes. Selected providers must maintain significant insurance coverages, including at least 1 million dollars for professional liability and commercial general liability per occurrence. The resulting non-exclusive contract will require a phased implementation schedule and a future roadmap for logical expansion.
Procurement

POSTED

about 21 hours ago

DEADLINE

in 18 days

AI Contract Overview

Show more

The contract requires full adherence to NIST SP 800-171 standards to protect covered defense information, mandating robust implementation of access controls, continuous monitoring, and secure handling of sensitive data throughout all operational processes. Compliance is non-negotiable and must be maintained across all systems and personnel involved in the performance of subcontracted activities under the Defense Logistics Agency. Failure to meet these requirements triggers mandatory cyber incident reporting through DIBNet, ensuring timely notification and response to any security breaches or anomalies. The subcontract is tied to a Department of Defense initiative under NAICS code 541512, focusing on information technology services, and is governed by stringent federal cybersecurity protocols designed to safeguard defense supply chain integrity. All activities must align with the designated compliance framework without exception, and performance is subject to ongoing oversight to verify adherence to the established security controls.

General Info

Must fully comply with NIST SP 800-171 for secure handling of defense data under DLA subcontract.

NAICS

541512 - Computer Systems Design Services

Place of Performance

Not specified

Set-Aside

NONE

Documents

This scope was carved out of SPE4A626F244Y.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

SCREW, CAP, HEXAGON HEAD

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed
Posted

subcontract

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Defense Logistics Agency
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Ensure NIST SP 800-171 compliance for safeguarding covered defense information, including monitoring, access controls, and cyber incident reporting via DIBNet.

More opportunities from Department Of Defense → Defense Logistics Agency

Same awarding agency

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS