This Government Contract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance (NIST SP 800-171) for Controlled Unclassified Information (CUI)

Closed

Federal

Submission Closed07/20/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

RFP TH-2026-03 Managed IT Services

Solicitation # TH-2026-03

The Town of Tyrone, Georgia, is soliciting proposals under RFP TH-2026-03 for a qualified Managed Service Provider to serve as its primary technology partner. Because the Town does not maintain an internal IT department, the selected firm will provide comprehensive information technology management, including end-user support, network and infrastructure management, Microsoft 365 administration, website management, and strategic IT planning. A critical component of the scope is the management of cybersecurity posture, backup and recovery, and ensuring compliance with GCIC/CJIS requirements for law enforcement systems and ADA standards for government websites. The Town will utilize a best-value selection process, with final award approval granted by the Mayor and Council. Proposers must submit a concise proposal not exceeding 20 pages, including a detailed technical approach, staffing model, and a pricing schedule based on a predictable fixed-cost service model. Required submissions include a PDF copy on a flash drive and one hard copy, delivered in a sealed envelope by the deadline. The resulting contract will be governed by Georgia law and requires the provider to maintain cyber liability insurance and adhere to E-Verify requirements. Proposals must remain valid for 120 days following the due date.

POSTED

DEADLINE

TEMPEST & RMF Cybersecurity IntegratorThe TEMPEST and RMF Cybersecurity Integrator subcontract supports prime contractors on Air Force Arnold Engineering Development Complex projects through the technical integration of information systems. The scope of work includes the installation of fiber and information systems, the implementation of TEMPEST compliance strategies, and the achievement of RMF certification and NSA accreditation for cryptologic systems and TACLANES. To be eligible, providers must demonstrate expertise in NSA guidelines and maintain CMMC Level 2 compliance. The primary objective is the delivery of fully accredited information systems and TEMPEST certification. This opportunity is managed by the Department of Defense under the FA9101 AEDC PKP Procurement Branch, with a response deadline of November 20, 2026.

FA9101 Aedc Pkp Procrmnt Branch

POSTED

DEADLINE

NA-IM Mission Support ServicesThe NA-IM Mission Support Services contract is a forecast opportunity issued by the National Nuclear Security Administration under the Department of Energy. This requirement is designated as a small business set-aside under NAICS code 541512, focusing on computer systems design services. The work is expected to be performed in the District of Columbia, with AMYX, Inc. listed as the incumbent contractor. The solicitation is scheduled for posting around November 1, 2026. Interested parties can coordinate with the Small Business Program Manager, Chelsea Murphy, for further information regarding this acquisition.

National Nuclear Security Administration

POSTED

DEADLINE

NA-IM Governance and Oversight (G&O)The NA-IM Governance and Oversight (G&O) contract is a forecast opportunity issued by the National Nuclear Security Administration under the Department of Energy. This requirement is designated as a small business set-aside under NAICS code 541512, focusing on computer systems design services. The work is expected to be performed in the District of Columbia, with VMD Systems Integrators, Inc. listed as the incumbent contractor. The solicitation is scheduled for posting around November 1, 2026. Interested parties can coordinate with the Small Business Program Manager, Chelsea Murphy, regarding this procurement. This forecast indicates the government's intent to continue governance and oversight services for the NA-IM program through a small business vehicle.

National Nuclear Security Administration

POSTED

DEADLINE

To obligate funding and establish a logical follow-on with Candor Solutions, LLC for CHRIS Support ServicesThe Department of Energy's Office of the Chief Financial Officer is seeking to obligate funding and establish a logical follow-on contract with Candor Solutions, LLC for CHRIS Support Services. This forecast, posted on November 1, 2026, identifies the requirement under NAICS code 541512 and specifies that the work will be performed in the District of Columbia. The procurement is designated as a small business set-aside, with Candor Solutions, LLC serving as the incumbent contractor. Christina Santangelo, the Small Business Program Manager, is the primary point of contact for this action.

Office of the Chief Financial Officer

POSTED

DEADLINE

The purpose of this purchase order is to procure AutoCAD a subscription for AutoCAD tools for EMCBC.The Office of Environmental Management within the Department of Energy is seeking to procure a subscription for AutoCAD tools to support the Environmental Management Community Based Contracting. This requirement is listed as a forecast with a posted date of November 1, 2026, and is categorized under NAICS code 541512. The performance of the contract is expected to take place in Ohio. The procurement is designated as a small business set-aside. American Business Solutions Inc is identified as the incumbent contractor for these services. Interested parties may coordinate with Kenneth Johnson, the Small Business Program Manager, regarding this acquisition.

Office of Environmental Management

POSTED

DEADLINE

OREM Cybersecurity Support ServicesThe Office of Environmental Management within the Department of Energy is forecasting a requirement for OREM Cybersecurity Support Services. This project is designated as a small business set-aside specifically for Service-Disabled Veteran-Owned Small Businesses and falls under NAICS code 541512. The work is expected to be performed in Tennessee, with Epsilon, Inc. listed as the incumbent contractor. The forecast was posted on November 1, 2026, and is managed by the Small Business Program Manager, Kenneth Johnson. Interested parties can find further details through the official Department of Energy acquisition forecast.

Office of Environmental Management

POSTED

DEADLINE

Re-advertisement - Provision of an Integrated Electronic Stakeholder Engagement and Communication Platform to the SIFAZ E-Business Directory. Stage: Re-advertisement : Provision of an Integrated Electronic Stakeholder Engagement and Communication Platform

Solicitation # 2026/FRZAM/FRZAM/138849

The Food and Agriculture Organization of the United Nations is seeking proposals through solicitation number 2026/FRZAM/FRZAM/138849 for the provision of an integrated electronic stakeholder engagement and communication platform. This project is specifically designed to enhance the SIFAZ E-Business Directory, focusing on improving how stakeholders interact and communicate within the digital ecosystem. This opportunity is currently in the re-advertisement stage and is designated for performance within Zambia. Interested parties can find further details and submission guidelines through the United Nations Global Marketplace.

POSTED

DEADLINE

Managed Services – College and Career Advising

Solicitation # 781-6-CB-20

The Texas Higher Education Coordinating Board (THECB) is seeking a long-term technology partner to provide comprehensive Managed Services for its College and Career Advising technology portfolio. This engagement encompasses both Design, Development, and Implementation (DDI) and Support and Maintenance Services (SMS) to ensure the operation, modernization, and security of a portfolio including ApplyTexas, My Texas Future, ADVi, Direct Admissions, and various Salesforce and Azure-hosted applications. The selected vendor will be responsible for application operations, engineering execution, and proactive modernization using Agile delivery methodologies and DevOps automation. The contract is set to commence upon execution and terminate on August 31, 2027, with options for four one-year renewals and a possible twelve-month extension for service transition. Award selection is based on a weighted evaluation of the technical proposal (35%), pricing (25%), organizational qualifications (20%), key personnel (10%), and proposal clarity (10%). Respondents must propose all-inclusive fixed-fee pricing based on a sprint cycle, excluding costs for customer-funded technologies like Azure, Salesforce, and Snowflake. Strict compliance requirements include TX-RAMP and SOC 2 Type II certification, adherence to FERPA and Texas Cybersecurity Framework Standards, and a mandate that all personnel be physically located within the United States. Additionally, vendors must maintain significant insurance coverages, including 5 million dollars in Cyber Liability and 3 million dollars in Technology Errors and Omissions insurance. Proposals must be submitted electronically via the THECB Vendor Client Gateway by October 22, 2026.

Texas Higher Education Coordinating Board

POSTED

DEADLINE

Time and Effort Reporting System

Solicitation # CDR103026

The University is seeking proposals from qualified vendors for a Time and Effort Reporting System designed to ensure compliance with federal effort reporting requirements. The selected vendor will be responsible for the comprehensive design, furnishing, installation, and ongoing support of the system. This solicitation is being managed through DAS Procurement for the state of Connecticut. Interested parties must submit their responses by the deadline of December 2, 2026. Detailed RFP documents are available via the HuskyBuy self-service online portal, and primary inquiries should be directed to UConn Procurement. Performance of the contract will take place within the state of Connecticut.

POSTED

DEADLINE

NorQuest College - Request for Proposal - ServiceNow Managed Services

Solicitation # AB-2026-07254

NorQuest College is issuing a Request for Proposal under solicitation number AB-2026-07254 to secure a qualified ServiceNow partner for managed services. The college aims to establish a long-term partnership to obtain specialized expertise, support, and optimization services that will complement its internal technical team. The primary goal is to ensure the continued operation and maturity of the ServiceNow platform while advancing the institution's overall information technology and service management objectives. The project will be performed in Edmonton, Alberta, and is managed by Senior Advisor Behram Gill. Interested proponents must submit all questions and responses via the Bids&Tenders platform by the deadline of November 30, 2026, at 8:00 PM.

NorQuest College

POSTED

2 days ago

DEADLINE

in 29 days

AI Contract Overview

The contract requires the implementation and assessment of cybersecurity controls to safeguard Controlled Unclassified Information (CUI) in full compliance with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement (DFARS) 252.240-7997. The scope centers on establishing, validating, and maintaining a robust cyber defense posture that meets federal standards for protecting sensitive but unclassified data, with specific emphasis on technical, operational, and managerial security controls outlined in NIST SP 800-171. The work must be performed at the designated place of performance in Hampton, Virginia, with a zip code of 23665-2040, and the contract is classified as a subcontract under NAICS code 541512, indicating it involves computer systems design services. The solicitation was posted on July 14, 2026, with a strict response deadline of July 20, 2026, indicating a tight turnaround for proposals. The contracting entity is the Department of Defense through the Medical Supply Chain Pharm FSA, which implies the work supports defense-related medical supply chain operations requiring stringent information protection. Although no specific set-aside status or point of contact is provided, the contract demand reflects a high-priority compliance imperative, requiring contractors to demonstrate proven expertise in NIST 800-171 implementation, CUI handling, and documentation of control effectiveness through assessments or audits. Failure to meet these requirements could result in non-compliance penalties or contract termination.