This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance (CMMC Level 2)

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

International

PEP Implementation Testing Services

Sheffield Health Partnership University NHS Foundation Trust

POSTED

DEADLINE

PN365 - Patient Engagement Portal

Solicitation # C487615

The Sheffield Health Partnership University NHS Foundation Trust is seeking a single supplier to provide a Patient Engagement Portal (PEP) for patient administration. This procurement is conducted via the G-Cloud 15 framework and is noted as being particularly suitable for small and medium-sized enterprises. The system must be fully operational and in live use by March 31, 2027, with the supplier responsible for all necessary testing and training prior to this date. The estimated contract value is 300,000 GBP including VAT, with an initial performance period from January 6, 2027, to January 5, 2031, and an option to extend for an additional two years until January 5, 2033. The selection process follows a competitive flexible procedure consisting of three stages: an initial shortlist via the G-Cloud 15 Digital Platform, a formal tender submission, and a final demonstration for the top three scoring tenderers. Award decisions are based on a weighted evaluation comprising technical quality at 40%, commercial price at 30%, the demonstration at 20%, and social value at 10%. Submissions must be made in English via the Atamis portal by November 26, 2026, and the contract stipulates a 30-day payment term.

Sheffield Health Partnership University NHS Foundation Trust

POSTED

DEADLINE

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Electronic Committee Management System (ECMS).

Solicitation # CCBC/PS3024/26/GH

Caerphilly County Borough Council is seeking tenders for the provision, implementation, support, and maintenance of a secure, cloud-hosted Electronic Committee Management System (ECMS). This system is intended to modernize the administration of democratic services by facilitating the creation, management, publication, and archiving of committee agendas, reports, minutes, and decisions. Key functional requirements include committee and calendar management, decision tracking, a public-facing publication portal, and secure access via desktop, tablet, and mobile devices. The solution must integrate with Microsoft 365 and other council systems, featuring role-based access controls and audit reporting. Crucially, the system must be fully bilingual in English and Welsh to ensure compliance with Welsh Language Standards, accessibility requirements, data protection legislation, and recognized security standards. The contract is scheduled to run from November 1, 2027, to October 31, 2032, with a possible five-year extension option renewed annually, potentially extending the term to November 1, 2037. The procurement is being conducted under a Competitive Flexible Procedure per the Procurement Act 2023, with a multi-stage evaluation weighted toward demonstrations (45%), quality questions (35%), and price (20%). The successful supplier will be responsible for system configuration, data migration, user acceptance testing, and comprehensive training for administrators, officers, and elected Members. Payment terms are set at 30 days, and the submission deadline for tenders is December 11, 2026.

Caerphilly County Borough Council

POSTED

DEADLINE

Послуги з доопрацювання та розширення функцій інформаційно-комунікаційної системи «е-Тернопіль» на базі комп’ютерної програми «Єдина інформаційно-аналітична система управління ресурсами та взаємодії з громадою в м.Тернопіль» («ЄІАСУРВГ»), а саме розробки

Solicitation # UA-2026-11-10-011367-a

The Ternopil City Council is seeking services for the refinement and expansion of the e-Ternopil information and communication system. This project focuses on developing additional functions based on the Unified Information and Analytical System for Resource Management and Community Interaction in Ternopil. The initiative is part of the Ternopil Municipal Territorial Community Informatization Program for 2025-2027. This procurement is being conducted by a local self-government body under specific regulations that allow for the protection of intellectual property rights. The project will be executed within the city of Ternopil, Ukraine, and is managed by the Ternopil City Council to enhance the digital infrastructure and community interaction capabilities of the region.

Тернопільська міська рада

POSTED

DEADLINE

Enterprise IWMS/CAFM Administration and RolloutThe Enterprise IWMS/CAFM Administration and Rollout is a subcontract opportunity with NAVSEA HQ under the Department of Defense, performed at the Washington Navy Yard. The project focuses on the administration, configuration, and rollout of the ARCHIBUS production database for prime contractors involved in Enterprise Workspace Management. Key technical responsibilities include managing user account lifecycles, security groups, roles, and Virtual Private Archives, as well as configuring organizational GeoHierarchies utilizing Agile delivery methodology. The successful contractor is responsible for delivering a fully configured ARCHIBUS production database and comprehensive Site Rollout Completion Packages. Due to the nature of the work, personnel are required to hold a Tier 3 background investigation. The solicitation is categorized under NAICS code 541512, with a response deadline set for December 4, 2026.

POSTED

DEADLINE

AMC/A6 Information Technology Needs Commercial Solutions Opening (CSO) - Amendment 04

Solicitation # FA445226SC001

The Air Mobility Command A6 Information Technology Needs Commercial Solutions Opening, solicitation FA445226SC001, is a competitive solicitation managed by the 763rd Enterprise Sourcing Squadron to obtain innovative IT solutions for secure and scalable infrastructure transformation. While the overarching CSO is unrestricted, the specific Area of Interest for Base IT Modernization is set aside exclusively for Service-Disabled Veteran Owned Small Businesses. The primary objective is to overhaul outdated legacy systems to improve operational efficiency, data sharing, and warfighter effectiveness by integrating modern technologies across core, cloud, and edge environments. The scope of work includes an initial site survey, design, full installation, and system acceptance testing, culminating in a seamless turnover with as-built documentation and government training. The acquisition follows a two-step selection process consisting of an initial white paper submission followed by a detailed approach by invitation. White papers are evaluated based on technical merit and importance to the agency. The government anticipates awarding Firm-Fixed Price contracts, though it reserves the right to use Other Transaction for Prototype Projects. Key requirements include a Secret facility clearance and Secret eligibility for all personnel, enrollment in continuous vetting, and compliance with the Risk Management Framework to achieve an Interim Authority to Test. The CSO remains open until February 26, 2031, with specific submission deadlines established for individual Areas of Interest.

POSTED

DEADLINE

Solicitation # 622775913

The Defense Information Systems Agency (DISA) is seeking sources for the All-Domain Adaptive Platforms and Technologies Support (ADAPTS) Indefinite-Delivery/Indefinite-Quantity (ID/IQ) Single Award contract. This effort, with an estimated value of 500 million dollars, aims to provide administration and management support for DISA Services Platforms and business intelligence capabilities. The scope of work includes sustained operations, continuous software integration, and platform-as-a-service (PaaS) engineering across the DISA Connect customer access portal, ServiceNow, Salesforce, Workday, and Palantir platforms. Key technical requirements include DevSecOps deployment in DoD/DoW Impact Level 6 or higher cloud environments, the implementation of Cross-Domain Solutions, and the management of API gateways and multi-tenant data layer architectures. The contract anticipates a ten-year ordering period, with a base period from February 3, 2028, to February 2, 2033, and an option period extending to February 2, 2038. Performance will occur at the contractor's site and DISA Headquarters in Fort Meade, Maryland. Strict security and certification standards apply, requiring the contractor to maintain CMMC Level 2 certification and a final Top Secret Facility Security Clearance. All personnel must be U.S. citizens holding active Secret, Top Secret, or TS/SCI clearances. The procurement is categorized under NAICS 541512 with a size standard of 34 million dollars, and responses must demonstrate compliance with FAR clause 52.219-14 regarding limitations on subcontracting.

Defense Information Systems Agency

POSTED

DEADLINE

SCADA and Instrumentation ModernizationThe SCADA and Instrumentation Modernization subcontract, issued by Garney Pacific, Inc., focuses on the installation and integration of instrumentation and monitoring systems for facility oversight projects within the City of San Diego. The primary objective is to modernize facility tracking and control by replacing outdated systems with a fully functional monitoring array and updated instrumentation. This opportunity is specifically set aside for small businesses, including certified Veteran Owned, Service-Disabled Veteran Owned, Women-Owned, and HUBZone small businesses. Interested parties must respond by December 10, 2026, under NAICS code 541512.

POSTED

DEADLINE

Fleet/Asset Tracking ServicesThis subcontract for Fleet and Asset Tracking Services involves providing comprehensive monitoring and tracking solutions for prime contractors working on Pakistan State Oil Company Limited projects. The scope of work includes the installation of GPS tracking hardware and the provision of a dedicated monitoring dashboard to enable real-time location reporting and asset telemetry. These services are delivered through a combination of telematics software and satellite or GSM tracking hardware to ensure consistent data flow and reporting. Eligible providers must possess valid NTN and GST/PST certificates to qualify for the engagement. The primary deliverables consist of real-time tracking data and detailed monitoring reports to support operational oversight within Pakistan. Interested parties must submit their responses by November 23, 2026.

Pakistan State Oil Company Ltd

POSTED

DEADLINE

Library Collection Analysis Tool

Solicitation # SRC000515

The North Dakota University System (NDUS) is soliciting proposals for a centralized, data-driven Library Collection Analysis Tool to support libraries and affiliated branches across North Dakota. The required solution must be a secure, web-based interface capable of aggregating and analyzing collection data from multiple integrated library systems, specifically including Polaris ILS. Key functional requirements include comprehensive collection analysis regarding size, age, and usage, data-driven tools for weeding and acquisition, and configurable dashboards for tracking performance metrics. The system must support multi-level analysis from individual branches to the statewide level and must comply with FERPA and accessibility standards, including the Americans with Disabilities Act and the Rehabilitation Act. Proposals will be evaluated on a 100-point scale, with 80 points allocated to technical factors—specifically the IT solution, product support, and vendor qualifications—and 20 points allocated to cost. Cost evaluation is based on the initial deployment plus the first two years of annual costs, with a budget limit of $5,000 for one-time implementation and between $16,000 and $20,000 for annual costs. The contract is governed by the laws of North Dakota with venue in Burleigh County. NDUS maintains ownership of all work products and reserves the right to suspend services for convenience. Payments are issued within 45 calendar days of an approved invoice. All inquiries and proposals must be directed to the Procurement Officer, April Moser, with a final submission deadline of December 4, 2026.

POSTED

DEADLINE

RFP IT-A4971-SJ Mobile PHP SharePoint Applications Support Services

Solicitation # IT-A4971-SJ

Pakistan State Oil Company Ltd has issued solicitation IT-A4971-SJ for the procurement of Mobile, PHP, and SharePoint Applications Support Services to be performed in Pakistan. The procurement process utilizes a Single Stage – Two Envelope bidding procedure, where commercial bid opening details are provided exclusively to bidders who have first been deemed technically qualified. Interested eligible contractors must submit sealed e-bids through the SAP Ariba Portal. To obtain tender documents, bidders are required to upload a scanned copy of a signed and stamped request on their official company letterhead. The submission window opens on November 10, 2026, and closes on November 23, 2026, at 02:15 PM, with the official bid opening scheduled for 03:00 PM on the same day.

Pakistan State Oil Company Ltd

POSTED

about 15 hours ago

DEADLINE

in 13 days

AI Contract Overview

This subcontract, issued by the Defense Logistics Agency under the Department of Defense, focuses on the implementation and maintenance of NIST SP 800-171 controls. The primary objective of the engagement is to ensure the successful achievement and long-term sustainability of CMMC Level 2 certification. Classified under NAICS code 541512, the contract was posted on July 13, 2026. It establishes the necessary cybersecurity framework required to protect sensitive information and maintain compliance with federal defense standards.