This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance & Incident Response Support

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and the Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern Laboratory Information Management Services platform for the Jody Connor Limnology Center. This new system must document, track, and retain physical, chemical, and biological water quality data throughout standard laboratory procedures, including sample receipt, analysis, and quality control. A critical requirement is the implementation of a two-way connection and synchronization with the Oracle-based Environmental Monitoring Database to ensure the automated flow of completed records. The solution must be an industry-standard LIMS or similar technological approach, compatible with Zebra ZD220 TTLabel printers, and capable of managing complex sample preservation and container requirements. This Firm Fixed Price solicitation, identified as RFP 2026-093, requires strict adherence to cybersecurity standards, including NIST SP 800-171, 800-53 Moderate level controls, and 800-63. Vendors are evaluated on a weighted scoring system totaling 110 points, with significant emphasis on technical solutions, staffing qualifications, and GovRAMP or FedRAMP authorization status. The project includes deliverables such as a detailed work plan, data conversion, system installation, and staff training, with a production go-live goal for early 2028. Proposals must be submitted electronically in searchable PDF format, with price and technical volumes separated to ensure a blind technical review.

Department Of Environmental Services

POSTED

DEADLINE

Parking Enforcement Systems IntegrationThe Parking Enforcement Systems Integration subcontract involves providing technical integration services for prime contractors working on City of Surrey projects in Canada. The primary objective is to connect mobile payment applications with existing parking enforcement systems through the development of APIs and data bridges, ensuring that payment statuses are synchronized in real time for enforcement officers. The scope of work includes the execution of comprehensive test plans to verify data accuracy and the resolution of any integration defects. The successful contractor is responsible for delivering fully tested integrations along with a final test results report. This opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026.

POSTED

DEADLINE

Parking Mobile Payment App

Solicitation # 1220-030-2026-056

The City of Surrey is soliciting proposals for a Parking Mobile Payment App to maintain continuity of its current services while integrating new innovations and value-added capabilities. The scope of work includes the provision of software, configuration, integration, training, and ongoing support. Key deliverables include a detailed implementation and transition plan. The solution must adhere to strict security and privacy standards, specifically the Payment Card Industry Data Security Standard (PCI DSS) and British Columbia privacy legislation, including a mandatory Privacy Impact Assessment. Proposals will be evaluated based on the proponent's experience, reputation, resources, technical capabilities, and financial proposals, with the City reserving the right to select the most advantageous offer rather than the lowest price. Financial proposals must cover three specific transaction fee scenarios: contractor exclusivity, non-exclusivity, and end-user payment of fees. The contract includes a term that can be extended for up to four additional one-year periods. Payment terms require parking fees to be remitted by the 15th day of the following month, and the City maintains the right to terminate or reduce services if funds are not appropriated for the current fiscal year. Contractors must maintain Workers Compensation Board coverage and a safety program meeting occupational health and safety requirements. The City also retains the right to inspect personal information and management policies at the contractor's premises. Proposals must be submitted as a single PDF file to the procurement office by the deadline.

POSTED

DEADLINE

EdTech Integration for World Language MaterialsThis subcontract for EdTech Integration for World Language Materials involves providing and configuring digital infrastructure for prime contractors supporting Atlanta Public Schools. The scope of work focuses on integrating digital textbooks and language learning software into the district learning management system, configuring single sign-on accounts, and ensuring all systems are interoperable with district hardware. All technical implementations must strictly adhere to FERPA and COPPA standards to ensure student data privacy and security. The project is categorized under NAICS code 541512 and aims to deliver a fully integrated digital learning environment for K-12 World Language projects. Interested parties should note that the solicitation was posted on November 5, 2026, with a response deadline of December 7, 2026.

Atlanta Public Schools

POSTED

DEADLINE

Independent Cybersecurity AssessmentThis subcontract for Independent Cybersecurity Assessment involves performing security testing and risk assessments for prime contractors working on Texas Education Agency projects. The scope of work focuses on conducting penetration testing for data submission tools and public portals to ensure the protection of confidential information. The selected provider must possess a strong understanding of state security standards and TGC 2063 to ensure full compliance. The primary deliverables for this engagement include a Risk Assessment Report and a Penetration Test Executive Summary. Interested parties should note that the response deadline is December 8, 2026. This opportunity falls under NAICS code 541512 and is managed through the Texas state procurement system.

Texas Education Agency

POSTED

DEADLINE

Bond Transparency Database

Solicitation # 701-26-015

The Texas Education Agency (TEA) is soliciting responses for the design, development, implementation, and operation of a statewide Bond Transparency Database. This system is required by Texas Education Code §45.114 to collect, validate, and publicly display information regarding school district and open-enrollment charter school bonds, maintenance taxes, capital projects, and related elections. The solution must be interoperable with other state financial reporting systems and include a public portal for approximately 1,208 Local Education Agencies, featuring geographic and historical filters for data retrieval. The project must adhere to all state security, accessibility, and hosting standards, including TX-RAMP certification. The contract will be awarded based on a best value approach, with disqualification for vendors with a D or F score in the Vendor Performance Tracking System. Respondents must submit a technical proposal of no more than four pages, using 12-point type and avoiding bullet points, images, or footnotes. A detailed Task, Activity, Deliverable, and Budget Plan (TADBP) is required for consideration. Deliverables are subject to a strict quality threshold where ten or more production bugs may result in non-payment. The contractor must also ensure all personnel complete TEA-approved cybersecurity training and comply with various non-discrimination and safety laws, including the Americans With Disabilities Act and the Federal Occupational Safety and Health Act.

Texas Education Agency

POSTED

DEADLINE

CMMC Level 2 Compliance & Data Handling SupportThis subcontract, titled CMMC Level 2 Compliance and Data Handling Support, is issued by the Department of Defense under the DLA Weapons Support Fluid Handling Division. The project focuses on performing cybersecurity assessments for prime contractors involved in DLA aerospace projects, specifically ensuring that systems meet NIST SP 800-171 standards for the secure transmission of defense procurement data. The primary objective is to implement data protection controls for Covered Defense Information in accordance with RD002 and to conduct CMMC Level 2 self-assessments per RD004. The selected provider will be responsible for delivering a secure data handling plan and a completed CMMC Level 2 self-assessment. The work is designated under NAICS code 541512 and will be performed at Hill AFB. The solicitation was posted on November 5, 2026, with a response deadline of November 16, 2026.

DLA WEAPONS SUPPORT FLUID HANDLING DIVISION

POSTED

DEADLINE

Installation, Configuration, and Testing ServicesThis subcontract for Installation, Configuration, and Testing Services involves the physical installation, technical configuration, and operational testing of scanning systems for prime contractors on Government of Ontario projects. The scope of work includes the integration of hardware and software to deliver a fully operational scanning system, ensuring all components are properly tested and functional. The project is managed by the Public and Business Service Delivery and Procurement agency in Canada. Contractors must strictly adhere to health and safety regulations, specifically OHSA R.S.O. 1990, c.0.1, and complete mandatory health and safety awareness training as required by O. Reg. 297/13. Responses to this solicitation are due by November 23, 2026.

Public and Business Service Delivery and Procurement

POSTED

DEADLINE

Digitization Software Licensing & ImplementationThis subcontract, titled Digitization Software Licensing and Implementation, involves the provision and configuration of image processing and digitization workflow management software. The project is designed for prime contractors working on government ministry archival projects for the Government of Ontario. The scope of work includes the delivery of an installed and licensed software system featuring batch processing tools, workflow automation, quality control capabilities, and metadata functionality. The opportunity was posted on November 5, 2026, with a response deadline of November 23, 2026. Classified under NAICS code 541512, the contract is managed by the Public and Business Service Delivery and Procurement agency, with the place of performance located in Canada.

Public and Business Service Delivery and Procurement

POSTED

DEADLINE

System Testing and Quality Assurance (QA)This subcontract opportunity, titled System Testing and Quality Assurance (QA), is issued by the New Jersey Division of Purchase and Property. The selected contractor will be responsible for performing independent testing of configured solutions for prime contractors, which includes developing comprehensive test plans and User Acceptance Testing strategies. Key technical duties involve executing functional, integration, and performance testing while maintaining a Requirements Traceability Matrix to ensure all project specifications are met. Final deliverables for the engagement include a formal Test Plan, a detailed Test Report, and official UAT sign-off. The procurement is designated as an SBA set-aside specifically for Small Business Enterprises and Disabled Veteran-Owned Businesses under NAICS code 541512. Interested parties must submit their responses by the deadline of February 4, 2027. This project focuses on ensuring the quality and reliability of systems implemented within the state's infrastructure through rigorous quality assurance protocols.

Division of Purchase and Property

POSTED

DEADLINE

Third-Party Interface and API IntegrationThis subcontract opportunity, titled Third-Party Interface and API Integration, is issued by the New Jersey Division of Purchase and Property. The project focuses on developing technical interfaces between case management systems and external state and federal systems for prime contractors. Key technical requirements include implementing real-time API or batch transfers for CASAS, TABE, and AWARE, while ensuring full compatibility with USDOL PIRL and WIPS schema formats. The successful contractor will be responsible for delivering functional system interfaces and comprehensive Interface Control Documents. The solicitation is designated as an SBA set-aside specifically for Small Business Enterprises and Disabled Veteran-Owned Businesses under NAICS code 541512. The posting date is November 5, 2026, with a response deadline of February 4, 2027. Interested parties can find further details through the New Jersey Start portal.

Division of Purchase and Property

POSTED

about 13 hours ago

DEADLINE

in 3 months

AI Contract Overview

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to protect controlled unclassified information within the defense industrial base. The contractor must establish robust monitoring systems to detect potential cyber incidents in real time and ensure immediate response protocols are in place. Any confirmed cyber incident must be reported through DIBNet within a strict 72-hour window to comply with federal defense cybersecurity requirements. This subcontract supports the Defense Logistics Agency’s mission to safeguard sensitive data and maintain operational readiness across the Department of Defense supply chain, operating under NAICS code 541512 for computer systems design services.