This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance (CMMC Level 2 Implementation)

Closed

Federal

Submission Closed07/24/2026, 12:00:00 PM CDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Windows Server Administration and Support

POSTED

DEADLINE

Power Platform and Dynamics 365 Specialized Support

POSTED

DEADLINE

Microsoft 365 and SharePoint Online Technical Support

POSTED

DEADLINE

Software Implementation and Integration Consultant

University of Michigan

POSTED

DEADLINE

Proof of Delivery (POD) for HomeMed Pharmacy

Solicitation # RFP-0012500-TECH-2026

The University of Michigan is soliciting proposals under RFP-0012500-TECH-2026 for a HIPAA-compliant proof-of-delivery (POD) and delivery management software solution for HomeMed Pharmacy. The objective is to modernize pharmacy operations by implementing a platform that supports electronic signature capture, photo verification, geofencing, and patient-facing digital confirmations. Key technical requirements include route optimization, real-time driver tracking, and bidirectional integration with CareTend (Wellsky) and Epic. The solution must adhere to strict accessibility standards, including WCAG 2.1 Level AA, Section 508, and the Americans with Disabilities Act. The contract is envisioned as a three-year initial agreement with the option to extend for two additional one-year periods. Suppliers must provide a comprehensive proposal including an executive summary, a detailed cost proposal via Excel, and a data security agreement signed as is. Cybersecurity certifications such as SOC2 Type 2, ISO 27001, or HITRUST are highly relevant to the evaluation. Payment terms are Net 0 days for suppliers enrolled in a virtual card program, or Net 45 days otherwise. Proposals were due by November 17, 2026, and the University requires interviews with key personnel before the project commences.

University of Michigan

POSTED

DEADLINE

System Testing and Quality Assurance for Chainbridge Enhancements

Tax Policy And Research

POSTED

DEADLINE

Chainbridge System Enhancements Continuation Req. 11/9/2026

Solicitation # SRC0000037616

The Chainbridge System Enhancements Continuation is a solicitation issued by the Alabama agency Tax Policy And Research for services under NAICS code 541512. The contract has a total value cap of 25,000 dollars, which includes the original agreement and any subsequent renewals. The term of the contract allows for annual renewals by written agreement for a total period of up to five years from the effective date. Performance and venue for litigation are centered in the state of Alabama, specifically the City of Montgomery. The agreement is governed by the Code of Alabama 1975, with specific provisions regarding non-appropriation of funds and proration, meaning the contract may be cancelled if funds are not available for subsequent fiscal periods. Suppliers must comply with several state mandates, including registration with the Alabama Secretary of State for foreign entities, enrollment in the E-Verify program, and certification of tax compliance under Act no. 2006-557. All responses must be submitted electronically through the Alabama Buys portal, and the State reserves the right to conduct cost realism and price reasonableness analyses for all bids.

Tax Policy And Research

POSTED

DEADLINE

XR Training Systems IntegratorThe XR Training Systems Integrator subcontract involves the setup, configuration, and integration of virtual reality hardware and software to support training projects for the Texas Office of the Attorney General. The selected provider will work under prime contractors to execute hardware assembly, software installation, and network configuration specifically for multi-user VR environments, ensuring the delivery of a fully operational and integrated training system. Qualified candidates must possess relevant IT certifications to perform the technical requirements of the role. This opportunity is categorized under NAICS code 541512 and was posted on November 9, 2026, with a response deadline of November 24, 2026.

POSTED

DEADLINE

Cybersecurity Testing and Assurance ProviderThe United Kingdom Sports Council is seeking a Cybersecurity Testing and Assurance Provider to serve as a subcontractor for digital projects. The selected provider will perform independent security and penetration testing for prime contractors, focusing on vulnerability management, security monitoring, and the validation of Secure by Design implementations. These tasks will be executed using specialized penetration testing software and scanners to ensure the integrity of digital assets. The provider is responsible for delivering comprehensive security testing reports, remediation records, and necessary assurance evidence. Key deliverables include the creation of detailed remediation plans to address identified vulnerabilities. Interested parties must submit their responses by December 11, 2026, in accordance with the solicitation posted on November 9, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Digital development partner and content management system platform implementation

Solicitation # DIG0911

The United Kingdom Sports Council is seeking a digital development partner to design, build, migrate, and launch a new website powered by a headless Software as a Service (SaaS) content management system. The project aims to replace the existing Sitecore structure with a user-centered, secure, and accessible digital experience, with a target go-live date of September 1, 2027. The contract spans four years, with the first year focusing on implementation and the subsequent three years dedicated to ongoing support and continuous improvement. The total budgeted value for the four-year term is up to 310,000 GBP, including VAT, which covers the initial build, CMS licensing, and annual support retainers. The successful supplier must adhere to strict technical and security standards, including the UK Government Secure by Design framework, WCAG 2.2 Level AA accessibility, and ISO/IEC 27001:2022 and Cyber Essentials Plus certifications. All data must be stored and handled within the United Kingdom, with encryption required both at rest and in transit. Award evaluation is based on a 100% weighting, distributed between quality of services (40%), pricing (20%), and relevant experience and track record (20%), with additional requirements for environmental sustainability and equality, diversity, and inclusion compliance. Proposals must be submitted by December 11, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Velocity Software License Provisioning

250-NETWORK Contract Office 10 (36C250)

POSTED

about 12 hours ago

DEADLINE

in 3 days

AI Contract Overview

This subcontract opportunity, issued by the Fluid Handling Division of the Department of Defense, focuses on the implementation and assessment of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls. The primary objective is to ensure the secure handling of controlled unclassified information through strict alignment with NIST SP 800-171 standards and full compliance with DFARS 252.204-7012 regulations. The project will be performed at Tinker AFB, zip code 73145-9031, under NAICS code 541512. Interested parties must submit their responses by the deadline of July 24, 2026, following the posting date of July 13, 2026.

General Info

DoD subcontract for CMMC Level 2 implementation at Tinker AFB by July 24, 2026.

Agency

Department Of Defense → FLUID HANDLING DIVISION

NAICS

541512 - Computer Systems Design Services

Place of Performance

TINKER AFB, OK, 73145-9031, USA

Set-Aside

NONE

Documents

This scope was carved out of SPE7M4-26-T-256H.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

BOLT, FLUID PASSAGE

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 13

subcontract

Response DeadlineJul 24

Deadline has passed

Submission Closed

07/24/2026, 12:00:00 PM CDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → FLUID HANDLING DIVISION

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → FLUID HANDLING DIVISION

Office AddressN/A

ContactsNo contact information available

Full Description

Implement and assess CMMC Level 2 controls for handling controlled unclassified information (CUI), including NIST SP 800-171 alignment and DFARS 252.204-7012 compliance.