This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance Support (CMMC/NIST SP 800-171)

Closed

Federal

Submission Closed07/22/2026, 01:00:00 PM EDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

System Integration & Implementation SpecialistThis subcontract opportunity is for a System Integration and Implementation Specialist to support prime contractors on workforce tracking projects for the New York State Department of Labor. The selected provider will be responsible for the technical setup and configuration of software tailored to agency requirements, specifically including the implementation of single sign-on capabilities through the NY.GOV Authentication System to ensure a fully operational system. The solicitation was posted on November 5, 2026, with a response deadline of December 9, 2026. Falling under NAICS code 541512, the project focuses on specialized computer systems design services to meet the integration needs of the state agency.

NYS Department of Labor

POSTED

DEADLINE

SAP Business Warehouse (BW) Technical Analyst

Canada Border Services Agency

POSTED

DEADLINE

SAP BPC Technical Analyst

Canada Border Services Agency

POSTED

DEADLINE

SAP Finance (FI) System Analyst

Canada Border Services Agency

POSTED

DEADLINE

CRM Implementation and Systems IntegrationThe CRM Implementation and Systems Integration subcontract involves the technical configuration and integration of a CRM platform for prime contractors working on State University of New York Old Westbury projects. The scope of work includes the development of secure APIs to connect the platform with student information systems, institutional financial systems, and Microsoft 365, as well as the creation of reporting dashboards and automated workflows to ensure a fully integrated environment. To qualify for this engagement, providers must hold either SOC 2 Type 2 or ISO/IEC 27001:2022 certification. The opportunity was posted on November 5, 2026, with a response deadline of December 2, 2026. This project falls under NAICS code 541512 and is managed through the State University of New York.

State University of New York (SUNY)

POSTED

DEADLINE

Network Hardware Installation and ConfigurationThis subcontract for Network Hardware Installation and Configuration involves the physical installation, configuration, and integration of network hardware and software for prime contractors across Chemung, Rockland, and Ulster Counties. The scope of work includes rack-mounting hardware and configuring firewall rules, routing protocols, and VLANs utilizing specialized cabling and diagnostic tools to deliver a fully operational network infrastructure. Qualified providers must hold industry-standard manufacturer certifications, such as CCNA, CCNP, or JNCIS. The opportunity was posted on November 5, 2026, with a response deadline of December 10, 2026, falling under NAICS code 541512 for the agency of Chemung County in New York.

POSTED

DEADLINE

IT Security Professional Services Under the Task-Based Services Supply Arrangement

Solicitation # 202703271

Public Safety Canada is seeking task-based IT security professional services under the Task-Based Informatics Professional Services Supply Arrangement to support cybersecurity initiatives in the National Capital Region. The scope of work includes performing security assessments, authorizations, architecture reviews, penetration testing, remediation validation, and incident-readiness packaging for departmental systems, cloud services, and networks. All work must align with Government of Canada policies and Communications Security Establishment guidance, specifically ITSG-33. The contract is structured around specific Task Authorizations, with payments tied to the acceptance of objective deliverables such as incident response plans, threat models, and validated remediation reports rather than elapsed time. The procurement is a Tier 1 solicitation open to invited TBIPS SA holders. The evaluation process is based on a combined rating of 70 percent technical merit and 30 percent price. The initial contract period runs from the date of award until March 31, 2027, with an irrevocable option for two additional one-year extensions. Required resources include various levels of IT security analysts, design specialists, and incident management specialists. Bidders must maintain valid organization security clearances, adhere to strict non-disclosure agreements, and provide proof of insurance within ten days of the award.

Department of Public Safety and Emergency Preparedness

POSTED

DEADLINE

Statewide Workforce Lifecycle Tracking System for Infrastructure Projects (NY Builds)

Solicitation # Z-142

The New York State Department of Labor is soliciting bids under IFB Z-142 for the implementation and maintenance of NY Builds, a statewide workforce lifecycle tracking system for infrastructure projects. This holistic talent management solution is designed to integrate employers, state agencies, and job seekers into a shared view of labor demand and supply, ensuring a skilled workforce is available for major infrastructure builds. The contract requires the provision of Eightfold AI Inc. software or an equivalent product that is interchangeable in performance and design. The resulting agreement will be an estimated quantity contract where items are purchased on an as-needed basis, with an anticipated start date of March 31, 2027, and a term of up to five years, potentially extendable by twelve months. This opportunity is reserved exclusively for Service-Disabled Veteran-Owned Businesses (SDVOBs), with a 100 percent goal, while also maintaining minority and women-owned business enterprise goals of 15 percent each. The award will be granted to the responsive and responsible bidder who offers the total best value, defined as the lowest grand total bid among those who pass a mandatory eligibility screening. Technical requirements include support for the NY.GOV Authentication System for single sign-on and compliance with the New York State Information Security Policy. Bidders must submit their proposals in three separate sealed volumes—technical, cost, and administrative—by December 9, 2026.

NYS Department of Labor

POSTED

DEADLINE

Airport Digital Twin Platform Implementation and Support Services

Solicitation # 2027-006-RFP

The Sanford Airport Authority is seeking a qualified Solution Provider under solicitation 2027-006-RFP to implement and support an Airport Digital Twin Platform and an open, standards-based ecosystem for the Orlando Sanford International Airport. The primary objective is to integrate disparate operational, maintenance, and facility systems into a common digital environment to enhance asset management, operational awareness, and facility stewardship. The initial phase of the project will focus specifically on terminal and airfield asset management, emphasizing performance monitoring and preventive, corrective, and predictive maintenance. The platform must utilize open standards, APIs, and middleware to ensure interoperability and incorporate spatial data such as GIS, CAD, BIM, and LiDAR imagery. Proposals are due by November 23, 2026, with a scheduled board award date of February 2, 2027. Evaluation is based on a points-weighted system considering the technical approach, implementation roadmap, experience, key personnel, training and sustainability, and the five-year cost of ownership. Mandatory minimum qualifications include registration with the Florida Department of State and compliance with Florida statutory requirements regarding scrutinized companies and public entity crimes. Selected providers must maintain significant insurance coverages, including at least 1 million dollars for professional liability and commercial general liability per occurrence. The resulting non-exclusive contract will require a phased implementation schedule and a future roadmap for logical expansion.

POSTED

DEADLINE

Nurse Call System Software Configuration and IntegrationThis subcontract for Nurse Call System Software Configuration and Integration involves the technical configuration of headend controllers for prime contractors on California Department of Corrections & Rehabilitation projects at Pelican Bay State Prison. The selected provider must configure systems in accordance with NIST Special Publication 800-145 and ensure full compatibility with CCHCS systems. The final deliverable is a fully configured, interoperable system accompanied by comprehensive documentation and knowledge transfer for both users and administrators. Due to the sensitive nature of the environment, the contractor is required to enter into a HIPAA Business Associate Agreement and undergo BCII/CLETS background checks. This opportunity falls under NAICS code 541512, with a response deadline of November 20, 2026.

California Department of Corrections & Rehabilitation

POSTED

DEADLINE

Website Migration ServicesThis subcontract for Website Migration Services supports the County of San Mateo County Executive’s Office by transferring data, content, and configurations for prime contractor website projects. The scope of work includes mapping data from legacy sites to new structures, executing the migration of databases and media, and managing hosting and DNS transitions through the use of staging environments to ensure a seamless transition. The primary objective is to deliver a fully migrated website while maintaining strict data integrity and security. This opportunity falls under NAICS code 541512 and was posted on November 4, 2026, with a response deadline of November 20, 2026.

County Executive's Office

POSTED

about 22 hours ago

DEADLINE

in 14 days

AI Contract Overview

The contract supports cybersecurity compliance for CMMC Level 2 and NIST SP 800-171 requirements by providing assessments, documentation, and development of plans of action to safeguard covered defense information. Efforts will focus on ensuring that systems and processes meet federal security standards through structured evaluations, gap analysis, and remediation planning tailored to defense contractor environments. The work is scoped to align with the National Institute of Standards and Technology guidelines and the Department of Defense’s Cybersecurity Maturity Model Certification framework. The contract is classified as a subcontract under NAICS code 541512, issued by the ASC Commodities Division within the Department of Defense. Performance is required at a specified location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 14, 2026, and responses are due by July 22, 2026. No set-aside designation or specific point of contact is provided, and all submissions must be made through the designated DIBBS platform.

General Info

CMMC Level 2 and NIST SP 800-171 compliance support via assessments, gap analysis, and remediation plans in New Cumberland, PA.

Agency

Department Of Defense → ASC COMMODITIES DIVISION

NAICS

541512 - Computer Systems Design Services

Place of Performance

NEW CUMBERLAND, PA, 17070-5002, USA

Set-Aside

NONE

Documents

This scope was carved out of SPE4A6-26-T-06PA.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

WRENCH, RATCHET

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 14

subcontract

Response DeadlineJul 22

Deadline has passed

Submission Closed

07/22/2026, 01:00:00 PM EDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → ASC COMMODITIES DIVISION

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → ASC COMMODITIES DIVISION

Office AddressN/A

ContactsNo contact information available

Full Description

Support CMMC Level 2 and NIST SP 800-171 compliance through assessments, documentation, and plan of action development for safeguarding covered defense information.