This Government Contract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance (CMMC Level 2) Implementation

Closed

Federal

Submission Closed07/22/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

BCBOE Boardroom Audio/Visual/Meeting Upgrade

Solicitation # PE-55037-NONST-2027-000000009

Burke County Board of Education is soliciting competitive proposals from qualified Audio-Visual Integration Firms for a turn-key technology refresh of its boardroom in Georgia. The project aims to create a high-performance hybrid environment compatible with Microsoft Teams, Zoom, and Google Meet, featuring live streaming capabilities to YouTube. Key technical requirements include the installation of a professional-grade Digital Signal Processing system for acoustic echo cancellation, PTZ camera integration, digital voting solutions, and an assistive listening system compliant with 2010 ADA Standards. The system must adhere to ANSI/AVIXA V202.01:2026 for display positioning and meet WCAG 2.1 Level AA and Section 508 accessibility standards for all user interfaces. Proposals are due by December 2, 2026, and must include one signed original, three hard copies, and a PDF on a labeled USB drive. Evaluation is based on a weighted matrix prioritizing cost (35%), technical competence and design alignment (30%), experience and references (15%), UI/UX design and interoperability (10%), and project timeline feasibility (10%). The selected contractor must maintain professional and cyber liability insurance of at least $1,000,000 per claim and certify compliance with Section 889 of the National Defense Authorization Act regarding prohibited telecommunications equipment. Final acceptance of the installation must occur no later than June 30, 2027, to align with the district's fiscal year.

Burke County Board of Education

POSTED

DEADLINE

IT Audit and Systems Implementation SupportThe IT Audit and Systems Implementation Support subcontract for the City of Portland involves providing technical auditing and systems integration services for prime contractors. The scope of work includes the design, development, and integration of financial data systems, as well as performing acceptance testing and creating comprehensive technical documentation and user manuals. Key deliverables for this engagement include system integration reports and detailed acceptance testing results. Qualified candidates must possess CISA certification or equivalent IT audit credentials to perform these services within the Portland-Vancouver-Hillsboro area. This opportunity falls under NAICS code 541512, with a response deadline set for December 15, 2026.

POSTED

DEADLINE

Railway Systems Integration ServicesThis subcontract for Railway Systems Integration Services involves performing technical integration of management systems for prime contractors working on Chiltern Rail Limited projects. The scope of work focuses on the development of APIs and middleware designed to bridge new systems with corporate systems and legacy railway data feeds, which includes the critical technical mapping of data fields specifically for live railway operational environments. The primary objective of the engagement is to deliver a fully integrated system ecosystem characterized by verified data exchange. Classified under NAICS code 541512, the contract ensures that complex data streams are synchronized to support the operational requirements of Chiltern Rail Limited.

Chiltern Rail Limited

POSTED

DEADLINE

Chiltern Rail - Performance, Delay & Incident Management System

Solicitation # ocds-h6vhtk-079718

Chiltern Rail Limited is seeking a comprehensive end-to-end Performance, Delay and Incident Management System to replace its existing Compass solution. The scope of work includes the provision, implementation, configuration, integration, data migration, testing, training, hosting, and ongoing maintenance of a system capable of supporting operational performance, delay management, incident and event management, and action-tracking within a live railway environment. The solution must integrate with relevant corporate, operational, and railway systems and may be delivered as a single integrated system or a combination of modules and third-party components, provided the supplier maintains responsibility for the entire requirement. The contract is estimated to begin on July 1, 2027, with an initial term of five years and an optional two-year extension at the discretion of Chiltern Rail, potentially extending the period of performance to July 1, 2034. The maximum estimated value for the full seven-year term is 1,900,000 GBP excluding VAT. Award decisions will be based on the highest overall score, weighted by technical response (55%), commercial price (20%), demonstration quality (15%), and social value (10%). The procurement follows a competitive flexible procedure under the Procurement Act 2023, involving a procurement specific questionnaire, initial tenders, a demonstration stage, a dialogue stage, and final tenders.

Chiltern Rail Limited

POSTED

DEADLINE

Telehealth Network and Display IntegrationThe Telehealth Network and Display Integration subcontract involves the supply and installation of network readiness and display hardware for prime contractors working on Texas Tech University Health Sciences Center mobile telehealth projects. The scope of work specifically requires the installation of Starlink-ready connectivity infrastructure along with two 24-inch monitor displays equipped with articulating mounts and HDMI/USB-C connectivity. This project falls under NAICS code 541512 and was posted on November 3, 2026, with a response deadline of November 30, 2026. The primary objective is the delivery of a fully installed display system and a functional, network-ready infrastructure to support mobile telehealth operations.

Texas Tech University Health Sciences Center

POSTED

DEADLINE

Azure IaaS Migration Services for Automic AutomationThis subcontract opportunity with Ontario Health involves the technical migration of Automic Automation environments from on-premises infrastructure to Azure IaaS for prime contractors. The selected provider will be responsible for configuring Azure environments to support Automic Automation v24.4.x and executing the necessary software upgrades to ensure a fully operational hosted environment. Qualified candidates must hold Azure Cloud Architect or Engineer certifications to perform the work in Canada. Interested parties should note that the response deadline is November 18, 2026, and the project falls under NAICS code 541512.

POSTED

DEADLINE

LMS Integration and Identity Management ImplementationThis subcontract, titled LMS Integration and Identity Management Implementation, involves the technical integration of integrity systems for prime contractors working on University of Oklahoma projects. The scope of work focuses on implementing LTI 1.3 Advantage APIs for Learning Management System integration and configuring SISO/PingFederate to enable Single Sign-On access. Additionally, the contractor is responsible for developing APIs to facilitate data exchange and ensuring that users outside the LMS have independent web access. The project requires specialized expertise in LTI standards and University LMS platforms to deliver a fully integrated system. This opportunity is associated with the Oklahoma University Health Sciences Center under NAICS code 541512. The solicitation was posted on November 3, 2026, with a response deadline set for January 4, 2027.

Oklahoma University Health Sciences Center

POSTED

DEADLINE

Monitoring & BMS Integration ServicesThis subcontract for Monitoring and BMS Integration Services involves the furnishing and installation of system monitoring and data retrieval systems for prime contractors working on Connecticut State Colleges and Universities projects. The scope of work focuses on integrating interval data meters and monitoring data into existing campus Energy Management Control Systems or Building Management Systems, while developing remote monitoring programs to ensure effective performance tracking. A key deliverable for this contract is the provision of an integrated monitoring dashboard. Managed by DAS Procurement for the state of Connecticut, the opportunity is categorized under NAICS code 541512. The solicitation was posted on November 3, 2026, with a response deadline set for December 16, 2026. Interested parties can find further details through the CTSource Bid Board.

POSTED

DEADLINE

SOC Optimization and IR Program MaturationThe SOC Optimization and IR Program Maturation subcontract focuses on the design, configuration, and optimization of the Security Operations Center environment and incident response playbooks for prime contractors supporting University of Maryland Global Campus projects. The scope of work involves developing academic-specific response playbooks and refining SIEM use cases and policies to ensure alignment with NIST CSF and NIST SP 800-171 standards. Key deliverables include updated incident response playbooks, optimized SIEM use cases, and comprehensive implementation validation reports. This opportunity is categorized under NAICS code 541512 and was posted on November 3, 2026, with a response deadline of November 16, 2026. The project is associated with the state of Maryland and aims to mature the overall incident response program through technical optimization and regulatory compliance.

POSTED

DEADLINE

Digital Accessibility Auditor / AT Testing SpecialistThis subcontract opportunity is for a Digital Accessibility Auditor and AT Testing Specialist to support prime contractors on projects for the Nebraska Public Power District. The selected provider will perform comprehensive accessibility audits utilizing a combination of automated scans, manual expert evaluations, and Assistive Technology verification. Testing must include the use of screen readers such as JAWS and NVDA, keyboard-only navigation, and magnifiers to ensure full compliance with WCAG 2.2 Level AA and VPAT 2.5 Rev standards. The scope of work requires the delivery of detailed baseline audit reports, site-specific issue logs, and executive summaries. Interested parties should note that the response deadline is December 15, 2026. This engagement falls under NAICS code 541512 and focuses on ensuring digital inclusivity and regulatory adherence across the agency's digital assets.

Nebraska Public Power District

POSTED

DEADLINE

Request for Proposal (RFP) for ADA External Website Compliance

Solicitation # 26082

The Nebraska Public Power District is seeking a System Integration Consultant for its ADA Website Compliance Project to ensure all external customer-facing websites conform to the Americans with Disabilities Act and WCAG 2.2 Level AA standards. The scope of work involves reducing the digital footprint from 96 to 11 external websites through technical remediation of code, design, and content, as well as providing accessibility governance and training. Key deliverables include Accessibility Conformance Reports using VPAT 2.5 Rev, WCAG 2.2 Level AA Conformance Statements, and an Accessibility Governance Playbook. The project includes support extending through April 2028, with specific performance milestones scheduled between December 2026 and February 2027. Proposals are due by December 15, 2026, and will be evaluated based on the respondent's experience with enterprise-level accessibility remediation, proficiency in manual and assistive technology testing, and expertise in modern web architectures. The selected consultant must provide pricing on a fixed basis, including a total fixed cost and a resource team rate card. Awarded contractors are required to maintain specific insurance coverages, including one million dollars in combined single limit for commercial general liability and automobile liability. Additionally, personnel must complete cybersecurity awareness training and sign a security agreement to gain access to the District network. Invoicing occurs monthly with a payment term of 30 calendar days.

Nebraska Public Power District

POSTED

about 8 hours ago

DEADLINE

in about 1 month

AI Contract Overview

The contract requires the implementation and documentation of cybersecurity controls to achieve compliance with CMMC Level 2 and NIST SP 800-171 standards, specifically focused on safeguarding Controlled Unclassified Information. This subcontract is issued under the Department of Defense's ASC Commodities Division and mandates strict adherence to federal cybersecurity frameworks to ensure the integrity, confidentiality, and availability of sensitive data. The performance location is designated as Tracy, California, with a ZIP code of 95304-5000, and the work must be completed in alignment with the specified regulatory requirements for handling CUI across all systems and processes. The solicitation was posted on July 14, 2026, with a response deadline of July 22, 2026, indicating a narrow window for submission. The NAICS code 541512 identifies this as an information technology services contract, suggesting the work involves technical implementation, assessment, and reporting rather than hardware procurement. While no set-aside status or point of contact is specified, the subcontract is linked to a DIBBS RFQ portal for official documentation and submission. Successful bidders must demonstrate not only technical capability to deploy the required controls but also comprehensive documentation practices to support third-party assessments and audits under the CMMC program.