This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance (CMMC Level 2) Implementation

Closed

Federal

Submission Closed07/22/2026, 10:00:00 AM PDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Inventory: All in-one inventory mgmt. software

Solicitation # EV00000992

The Oklahoma Department of Agriculture, Food, and Forestry is soliciting a comprehensive, all-in-one inventory and order management system for the Forest Regeneration Center. The selected supplier will be responsible for reviewing existing seedling inventory and sales systems to implement a tracking system that supports e-commerce, point-of-sale transactions, and automated shipping and pickup fulfillment. A key requirement is the integration of the new system with the center's existing WooCommerce online store. The supplier must also provide a specialist to assist with implementation, data migration, onboarding, and live support. Bidders must submit a firm, fixed price for the contract term via the Oklahoma Supplier Portal by November 26, 2026. Proposals will be evaluated based on the ability to meet specifications, the number of requested exceptions to state terms—which should not exceed 10%—and the provision of required Authorization to Operate (ATO) documentation. Required bid components include a cover page, company information, pricing, and various certifications, including non-collusion and insurance certificates from carriers with an A.M. Best rating of A- or better. Payment for services is set at net 45 days following customer acceptance of deliverables at the destination.

Oklahoma Department of Agriculture

POSTED

DEADLINE

NHDES Watershed Management Bureau (WMB) monitors surface waters in New Hampshire through a variety of programs that largely operate out of the Jody Connor Limnology Center (JCLC). These programs generate a variety of data types (physical/chemical,...

Solicitation # 2026-093

The New Hampshire Department of Environmental Services and the Department of Information Technology are seeking a vendor to replace an obsolete Microsoft Access login database with a modern Laboratory Information Management Services platform for the Jody Connor Limnology Center. This new system must document, track, and retain physical, chemical, and biological water quality data throughout standard laboratory procedures, including sample receipt, analysis, and quality control. A critical requirement is the implementation of a two-way connection and synchronization with the Oracle-based Environmental Monitoring Database to ensure the automated flow of completed records. The solution must be an industry-standard LIMS or similar technological approach, compatible with Zebra ZD220 TTLabel printers, and capable of managing complex sample preservation and container requirements. This Firm Fixed Price solicitation, identified as RFP 2026-093, requires strict adherence to cybersecurity standards, including NIST SP 800-171, 800-53 Moderate level controls, and 800-63. Vendors are evaluated on a weighted scoring system totaling 110 points, with significant emphasis on technical solutions, staffing qualifications, and GovRAMP or FedRAMP authorization status. The project includes deliverables such as a detailed work plan, data conversion, system installation, and staff training, with a production go-live goal for early 2028. Proposals must be submitted electronically in searchable PDF format, with price and technical volumes separated to ensure a blind technical review.

Department Of Environmental Services

POSTED

DEADLINE

Parking Enforcement Systems IntegrationThe Parking Enforcement Systems Integration subcontract involves providing technical integration services for prime contractors working on City of Surrey projects in Canada. The primary objective is to connect mobile payment applications with existing parking enforcement systems through the development of APIs and data bridges, ensuring that payment statuses are synchronized in real time for enforcement officers. The scope of work includes the execution of comprehensive test plans to verify data accuracy and the resolution of any integration defects. The successful contractor is responsible for delivering fully tested integrations along with a final test results report. This opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026.

POSTED

DEADLINE

Parking Mobile Payment App

Solicitation # 1220-030-2026-056

The City of Surrey is soliciting proposals for a Parking Mobile Payment App to maintain continuity of its current services while integrating new innovations and value-added capabilities. The scope of work includes the provision of software, configuration, integration, training, and ongoing support. Key deliverables include a detailed implementation and transition plan. The solution must adhere to strict security and privacy standards, specifically the Payment Card Industry Data Security Standard (PCI DSS) and British Columbia privacy legislation, including a mandatory Privacy Impact Assessment. Proposals will be evaluated based on the proponent's experience, reputation, resources, technical capabilities, and financial proposals, with the City reserving the right to select the most advantageous offer rather than the lowest price. Financial proposals must cover three specific transaction fee scenarios: contractor exclusivity, non-exclusivity, and end-user payment of fees. The contract includes a term that can be extended for up to four additional one-year periods. Payment terms require parking fees to be remitted by the 15th day of the following month, and the City maintains the right to terminate or reduce services if funds are not appropriated for the current fiscal year. Contractors must maintain Workers Compensation Board coverage and a safety program meeting occupational health and safety requirements. The City also retains the right to inspect personal information and management policies at the contractor's premises. Proposals must be submitted as a single PDF file to the procurement office by the deadline.

POSTED

DEADLINE

LMS Technical Integration and Support ServicesThe LMS Technical Integration and Support Services subcontract focuses on providing essential technical setup, network integration, and continuous support for prime contractors managing City of Dallas LMS projects. The scope of work includes executing network integration, conducting user training, and performing driver updates in strict accordance with the Technology Reference Architecture Checklist. The ultimate goal is to deliver a fully integrated and functional LMS platform supported by active technical assistance. To ensure operational success, the contractor will provide technicians for both on-site and remote service support. This engagement falls under NAICS code 541512 and is managed through the City of Dallas. Interested parties should note the response deadline of December 11, 2026, to provide these specialized integration and maintenance services.

POSTED

DEADLINE

EdTech Integration for World Language MaterialsThis subcontract for EdTech Integration for World Language Materials involves providing and configuring digital infrastructure for prime contractors supporting Atlanta Public Schools. The scope of work focuses on integrating digital textbooks and language learning software into the district learning management system, configuring single sign-on accounts, and ensuring all systems are interoperable with district hardware. All technical implementations must strictly adhere to FERPA and COPPA standards to ensure student data privacy and security. The project is categorized under NAICS code 541512 and aims to deliver a fully integrated digital learning environment for K-12 World Language projects. Interested parties should note that the solicitation was posted on November 5, 2026, with a response deadline of December 7, 2026.

Atlanta Public Schools

POSTED

DEADLINE

Independent Cybersecurity AssessmentThis subcontract for Independent Cybersecurity Assessment involves performing security testing and risk assessments for prime contractors working on Texas Education Agency projects. The scope of work focuses on conducting penetration testing for data submission tools and public portals to ensure the protection of confidential information. The selected provider must possess a strong understanding of state security standards and TGC 2063 to ensure full compliance. The primary deliverables for this engagement include a Risk Assessment Report and a Penetration Test Executive Summary. Interested parties should note that the response deadline is December 8, 2026. This opportunity falls under NAICS code 541512 and is managed through the Texas state procurement system.

Texas Education Agency

POSTED

DEADLINE

Bond Transparency Database

Solicitation # 701-26-015

The Texas Education Agency (TEA) is soliciting responses for the design, development, implementation, and operation of a statewide Bond Transparency Database. This system is required by Texas Education Code §45.114 to collect, validate, and publicly display information regarding school district and open-enrollment charter school bonds, maintenance taxes, capital projects, and related elections. The solution must be interoperable with other state financial reporting systems and include a public portal for approximately 1,208 Local Education Agencies, featuring geographic and historical filters for data retrieval. The project must adhere to all state security, accessibility, and hosting standards, including TX-RAMP certification. The contract will be awarded based on a best value approach, with disqualification for vendors with a D or F score in the Vendor Performance Tracking System. Respondents must submit a technical proposal of no more than four pages, using 12-point type and avoiding bullet points, images, or footnotes. A detailed Task, Activity, Deliverable, and Budget Plan (TADBP) is required for consideration. Deliverables are subject to a strict quality threshold where ten or more production bugs may result in non-payment. The contractor must also ensure all personnel complete TEA-approved cybersecurity training and comply with various non-discrimination and safety laws, including the Americans With Disabilities Act and the Federal Occupational Safety and Health Act.

Texas Education Agency

POSTED

DEADLINE

CMMC Level 2 Compliance & Data Handling SupportThis subcontract, titled CMMC Level 2 Compliance and Data Handling Support, is issued by the Department of Defense under the DLA Weapons Support Fluid Handling Division. The project focuses on performing cybersecurity assessments for prime contractors involved in DLA aerospace projects, specifically ensuring that systems meet NIST SP 800-171 standards for the secure transmission of defense procurement data. The primary objective is to implement data protection controls for Covered Defense Information in accordance with RD002 and to conduct CMMC Level 2 self-assessments per RD004. The selected provider will be responsible for delivering a secure data handling plan and a completed CMMC Level 2 self-assessment. The work is designated under NAICS code 541512 and will be performed at Hill AFB. The solicitation was posted on November 5, 2026, with a response deadline of November 16, 2026.

DLA WEAPONS SUPPORT FLUID HANDLING DIVISION

POSTED

DEADLINE

Installation, Configuration, and Testing ServicesThis subcontract for Installation, Configuration, and Testing Services involves the physical installation, technical configuration, and operational testing of scanning systems for prime contractors on Government of Ontario projects. The scope of work includes the integration of hardware and software to deliver a fully operational scanning system, ensuring all components are properly tested and functional. The project is managed by the Public and Business Service Delivery and Procurement agency in Canada. Contractors must strictly adhere to health and safety regulations, specifically OHSA R.S.O. 1990, c.0.1, and complete mandatory health and safety awareness training as required by O. Reg. 297/13. Responses to this solicitation are due by November 23, 2026.

Public and Business Service Delivery and Procurement

POSTED

DEADLINE

Digitization Software Licensing & ImplementationThis subcontract, titled Digitization Software Licensing and Implementation, involves the provision and configuration of image processing and digitization workflow management software. The project is designed for prime contractors working on government ministry archival projects for the Government of Ontario. The scope of work includes the delivery of an installed and licensed software system featuring batch processing tools, workflow automation, quality control capabilities, and metadata functionality. The opportunity was posted on November 5, 2026, with a response deadline of November 23, 2026. Classified under NAICS code 541512, the contract is managed by the Public and Business Service Delivery and Procurement agency, with the place of performance located in Canada.

Public and Business Service Delivery and Procurement

POSTED

about 15 hours ago

DEADLINE

in 17 days

AI Contract Overview

The contract requires full implementation of NIST SP 800-171 cybersecurity controls and active support toward achieving CMMC Level 2 certification, including the preparation of all necessary self-assessments and comprehensive documentation to demonstrate compliance. This effort is critical for ensuring the protected information systems meet federal standards for handling controlled unclassified information, with a focus on risk management, access control, incident response, and system integrity. The contractor must deliver a fully documented and validated compliance posture suitable for third-party assessment, aligning all operational and technical practices with the CMMC framework. This subcontract is issued under the NAICS code 541512 for computer systems design services and is managed by the ASC Commodities Division within the Department of Defense. The place of performance is located in Tracy, California, with a ZIP code of 95304-5000. The solicitation was posted on July 14, 2026, and responses are due by July 22, 2026. Interested parties must submit proposals through the DIBBS platform prior to the deadline to be considered, with no set-aside provisions indicated. All work must be completed in alignment with DoD cybersecurity directives and under strict adherence to the contractual compliance obligations.