This Subcontract opportunity from Department Of Defense was posted on August 28, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance for Covered Defense Information

Closed

Federal

Submission Closed08/31/2026, 10:00:00 AM PDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Genesys Value Added Reseller (VAR) Professional ServicesThis subcontract opportunity is for the provision of application support and professional services to prime contractors working on projects for the California Franchise Tax Board. The selected provider will be responsible for technical support, configuration, optimization, and troubleshooting specifically within the Genesys CCP environment. To be eligible for this engagement, the contractor must maintain status as a recognized Genesys Value Added Reseller. The scope of work involves delivering a combination of technical support hours and specific professional service deliverables under NAICS code 541512. Interested parties should note that the response deadline is January 1, 2027, with the project falling under the jurisdiction of the State of California.

POSTED

DEADLINE

RFP 11159.46 Airport Identity Management System and Maintenance and Support Services

Solicitation # 11159.46

Solicitation 11159.46 is a Request for Proposals issued by the City and County of San Francisco for the San Francisco International Airport to procure an Airport Identity Management System (AIDMS) and associated maintenance and support services. The scope of work is divided into two primary phases: the first involves the design, installation, implementation, integration, and testing of the system software and hardware, and the second focuses on ongoing warranty, maintenance, and support. The project requires the contractor to provide comprehensive training and user documentation, as well as recommendations for workstations and peripherals. Final system acceptance is contingent upon the successful completion of all implementation phases and a 60-day stabilization test period. The procurement process utilizes a scored evaluation based on 100 possible points, preceded by a pass/fail screening of minimum qualifications. To qualify, proposers must be the original manufacturer of a commercially off-the-shelf system, not a reseller, and demonstrate at least two successful AIDMS implementations and five years of continuous support experience at medium or large hub U.S. airports. The contract includes strict compliance requirements, including adherence to San Francisco Administrative Code, prevailing wage laws, ADA and WCAG 2.1 Level AA accessibility standards, and DHS/CISA vulnerability management guidelines. Additionally, the agreement prohibits the use of generative artificial intelligence in deliverables without prior written approval and requires key personnel accessing personally identifiable information to maintain SFO badges. Proposals must be submitted via the OpenGov portal by December 4, 2026, and must remain valid for 180 days.

POSTED

DEADLINE

Solicitation # BPM059590

The Maryland Department of Health Developmental Disabilities Administration is soliciting proposals under RFP OCMP-27-25800 for a secure, scalable cloud-based data analytics capability. This single-award, firm-fixed-price contract is intended to transform state-held claims and program data into actionable insights through a three-tier analytics framework utilizing deterministic rules, statistical outlier modeling, and network analysis. The project aims for full completion by June 30, 2027, with an estimated budget of 5 million dollars in general funds. Key deliverables include the development of executive dashboards, repeatable analytical workflows, and a comprehensive implementation schedule covering mobilization through operational transition. The procurement process utilizes a two-part evaluation where technical factors are weighted more heavily than financial factors. Qualified offerors must demonstrate at least three years of experience in data analytics, specifically within healthcare or Medicaid programs, and provide key personnel including a Project Manager and Subject Matter Experts. Submissions must be made via the eMMA portal in separate technical and financial volumes. The solicitation mandates a 7 percent Minority Business Enterprise and a 1 percent Veteran-Owned Small Business Enterprise participation goal. Additionally, the successful contractor must adhere to State of Maryland DoIT information security policies and ensure personnel complete required CJIS background clearances.

POSTED

DEADLINE

IT Systems Development and Integration ServicesThis subcontract for IT Systems Development and Integration Services supports prime contractors on digital infrastructure projects for the Department for Communities. The scope of work focuses on the development of business intelligence software, the execution of system implementation planning, and the provision of expert technical systems consultancy. Key deliverables include the creation of functional software modules, the delivery of integrated systems, and the production of comprehensive technical implementation plans. The opportunity was posted on November 9, 2026, with a response deadline of December 7, 2026. Classified under NAICS code 541512, the contract is designed to enhance the agency's digital capabilities through specialized software engineering and systems integration expertise.

Department for Communities

POSTED

DEADLINE

Server and Storage Array Re-installation ServicesThis subcontract for Server and Storage Array Re-installation Services supports prime contractors on projects for the State of California State Treasurer's Office. The scope of work involves the physical rack installation and reconnection of relocated IT hardware, specifically eight HPE ProLiant Gen10 Plus Servers and one HPE Alletra Storage Array. The selected provider must ensure all power cabling, peripheral interconnects, and fiber and LAN cables are properly reconnected at the server end to deliver a fully operational environment. Technical proficiency in HPE hardware installation and cabling standards is required for this engagement. The opportunity was posted on November 9, 2026, with a response deadline of November 25, 2026. This project falls under NAICS code 541512 and is managed through the Cal eProcure system.

POSTED

DEADLINE

OCMP-27-25799 Services - Stakeholder Experience

Solicitation # BPM059601

The Maryland Department of Health Developmental Disabilities Administration is seeking a single award contractor to provide data analytics support and tool development to improve real-time visibility into program spending, utilization, claims, service delivery, stakeholder experience, and provider performance patterns. The primary objective is to ensure the financial and programmatic efficiency of the state's developmental disabilities service system through the implementation of a Stakeholder Experience Platform. This contract has a duration of 7.5 months and includes specific goals for Minority Business Enterprise and Veteran-Owned Small Business Enterprise participation. The procurement process utilizes a Competitive Sealed Proposals method where technical and financial factors are weighted equally. Technical evaluation focuses on the work plan, staff qualifications, offeror capabilities, and economic benefit to the State of Maryland. The selected contractor must adhere to strict security and compliance mandates, including CJIS criminal background checks, HIPAA Business Associate Agreements, and the use of a tracking system for Service Level Agreement reporting. Performance is measured by specific quality standards regarding deliverable timeliness, quality, stakeholder engagement, and communication responsiveness, with failure to meet these standards resulting in SLA credits. Financial proposals must provide fully loaded hourly labor rates for roles including Project Managers, Subject Matter Experts, and Technical/Analytical Support. Payments are made via electronic funds transfer and require a signed Deliverable Product Acceptance Form. Proposals must be submitted in two separate volumes via the eMMA electronic procurement system, consisting of a technical response and a financial proposal. Additional requirements include a non-compete clause prohibition, a non-disclosure agreement, and a data use agreement.

POSTED

DEADLINE

Windows Server Administration and SupportThe Windows Server Administration and Support subcontract involves providing technical support and maintenance for Windows Server infrastructure to prime contractors working on City of Surrey projects. The selected provider will be responsible for server-side technical support, managing incident responses for server-related issues, and ensuring that server availability and performance consistently meet the standards set by the City of Surrey. Key deliverables include the maintenance of a stable server environment and the provision of detailed incident resolution reports. Qualified candidates must possess a Windows Server certification or provide evidence of equivalent professional expertise. This opportunity is associated with NAICS code 541512 and is based in Canada. Interested parties must submit their responses by the deadline of December 1, 2026.

POSTED

DEADLINE

Power Platform and Dynamics 365 Specialized SupportThis subcontract opportunity involves providing specialized technical support for low-code automation and CRM platforms to prime contractors working on City of Surrey projects. The selected provider will be responsible for troubleshooting and maintaining Dynamics 365 configurations and Power Platform workflows, while managing the intake of service requests and delivering technical resolutions. Additionally, the role requires providing system health and stability reporting to the management team to ensure operational efficiency. Technical proficiency in Microsoft Power Platform and Dynamics 365 is mandatory for this engagement. The contract is categorized under NAICS code 541512 and is based in Canada. Interested parties must submit their responses by the deadline of December 1, 2026.

POSTED

DEADLINE

Microsoft 365 and SharePoint Online Technical SupportThis subcontract focuses on providing specialized technical support and troubleshooting for Microsoft 365 and SharePoint Online environments to benefit prime contractors working on City of Surrey projects in Canada. The scope of work involves managing the end-to-end service request process through a dedicated support portal and communication channels, with a capacity to resolve up to 100 support incidents annually. The service provider is required to adhere to strict response time SLAs, particularly for critical severity-A incidents, and must provide regular management reports detailing activity and milestones. This engagement is categorized under NAICS code 541512 and is associated with the Province of British Columbia.

POSTED

DEADLINE

Software Implementation and Integration ConsultantThis subcontract for a Software Implementation and Integration Consultant involves the technical integration of POD software for prime contractors supporting University of Michigan HomeMed Pharmacy projects. The selected consultant is responsible for the end-to-end delivery of a fully operational integrated system, beginning with the project assessment phase and continuing through software configuration tailored to specific pharmacy operational needs. Key deliverables include the development of a comprehensive project execution plan and a robust risk management strategy. The scope of work requires the coordination of both on-site and off-site activities to ensure all milestones are met within a defined project timeline. This engagement falls under NAICS code 541512 and is associated with the University of Michigan. Interested parties should note the response deadline of November 18, 2026.

University of Michigan

POSTED

DEADLINE

Proof of Delivery (POD) for HomeMed Pharmacy

Solicitation # RFP-0012500-TECH-2026

The University of Michigan is soliciting proposals under RFP-0012500-TECH-2026 for a HIPAA-compliant proof-of-delivery (POD) and delivery management software solution for HomeMed Pharmacy. The objective is to modernize pharmacy operations by implementing a platform that supports electronic signature capture, photo verification, geofencing, and patient-facing digital confirmations. Key technical requirements include route optimization, real-time driver tracking, and bidirectional integration with CareTend (Wellsky) and Epic. The solution must adhere to strict accessibility standards, including WCAG 2.1 Level AA, Section 508, and the Americans with Disabilities Act. The contract is envisioned as a three-year initial agreement with the option to extend for two additional one-year periods. Suppliers must provide a comprehensive proposal including an executive summary, a detailed cost proposal via Excel, and a data security agreement signed as is. Cybersecurity certifications such as SOC2 Type 2, ISO 27001, or HITRUST are highly relevant to the evaluation. Payment terms are Net 0 days for suppliers enrolled in a virtual card program, or Net 45 days otherwise. Proposals were due by November 17, 2026, and the University requires interviews with key personnel before the project commences.

University of Michigan

POSTED

about 16 hours ago

DEADLINE

in 8 days

AI Contract Overview

This subcontract, titled Cybersecurity Compliance for Covered Defense Information, is issued by the Department of Defense under the ASC Supplier Oper AE and AF Div. The primary objective of the contract is the implementation and maintenance of NIST SP 800-171 controls to ensure the protection of covered defense information in accordance with DFARS 252.204-7012. The work is categorized under NAICS code 541512 and is to be performed in Tracy, California. The opportunity was posted on August 28, 2026, with a response deadline of August 31, 2026. Interested parties can find further details through the provided DIBBS link.