This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance Support (NIST SP 800-171)

Closed

Federal

Submission Closed07/17/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Airport Digital Twin Platform Implementation and Support Services

Solicitation # 2027-006-RFP

The Sanford Airport Authority is soliciting proposals under RFP 2027-006 for the implementation and support of an Airport Digital Twin Platform at Orlando Sanford International Airport. The objective is to establish a long-term, open, and standards-based digital twin ecosystem that integrates various independent operational, maintenance, and facility systems into a common operational environment. This platform will complement existing systems of record to enhance asset visibility, operational awareness, and decision-making through the use of visualization, analytics, dashboards, and AI. The solution must support a variety of spatial data, including GIS, CAD, BIM, and LiDAR imagery, and utilize open standards such as APIs and middleware for interoperability. The contract will be awarded based on a points-based scoring method to the respondent providing the best value and best meeting the Authority's goals. Evaluation criteria include the respondent's experience with digital twin or enterprise asset visualization platforms, the technical architecture of the proposed commercially available platform, the implementation roadmap, and the qualifications of key personnel. Proposals must include a five-year cost of ownership covering base implementation, licensing, hosting, and professional services. The selected provider will be responsible for configuring, deploying, and supporting the platform, including providing user acceptance support and adhering to Florida's public records laws and specific insurance requirements.

POSTED

DEADLINE

Nurse Call System Software Configuration and IntegrationThis subcontract for Nurse Call System Software Configuration and Integration involves the technical configuration of headend controllers for prime contractors on California Department of Corrections & Rehabilitation projects at Pelican Bay State Prison. The selected provider must configure systems in accordance with NIST Special Publication 800-145 and ensure full compatibility with CCHCS systems. The final deliverable is a fully configured, interoperable system accompanied by comprehensive documentation and knowledge transfer for both users and administrators. Due to the sensitive nature of the environment, the contractor is required to enter into a HIPAA Business Associate Agreement and undergo BCII/CLETS background checks. This opportunity falls under NAICS code 541512, with a response deadline of November 20, 2026.

California Department of Corrections & Rehabilitation

POSTED

DEADLINE

Website Migration ServicesThis subcontract for Website Migration Services supports the County of San Mateo County Executive’s Office by transferring data, content, and configurations for prime contractor website projects. The scope of work includes mapping data from legacy sites to new structures, executing the migration of databases and media, and managing hosting and DNS transitions through the use of staging environments to ensure a seamless transition. The primary objective is to deliver a fully migrated website while maintaining strict data integrity and security. This opportunity falls under NAICS code 541512 and was posted on November 4, 2026, with a response deadline of November 20, 2026.

County Executive's Office

POSTED

DEADLINE

As-Needed Website Services

Solicitation # 2027-RFP-00186

The County of San Mateo, through the County Executive's Office, is soliciting proposals under solicitation number 2027-RFP-00186 for as-needed website services. The scope of work includes the creation, maintenance, enhancement, redesign, and migration of websites, with a specific focus on the ongoing support of the Fair Funding website. Services will be authorized via County-approved Task Orders and include discovery, strategy planning, and technical recommendations. The selected firm must provide monthly maintenance reports, quarterly accessibility status reports, and comprehensive technical documentation. The contract has a base term of three years, with a single option for the County to extend the agreement for up to five additional years. To be eligible, proposers must have at least four years of experience providing similar services and must be registered with the System for Award Management. Evaluation is based on a points-based system weighing project approach (30%), firm qualifications (25%), team qualifications (20%), and price (25%), with the highest-scoring candidates potentially undergoing interviews. The contract mandates strict adherence to accessibility standards, including the Americans with Disabilities Act and Section 504 of the Rehabilitation Act, as well as HIPAA compliance for the protection of electronic protected health information. All deliverables must undergo a quality assurance process, including mobile responsiveness testing, and any defects identified prior to acceptance must be corrected by the contractor at no additional cost.

County Executive's Office

POSTED

DEADLINE

Website Transition-In and Discovery ServicesThis subcontract for Website Transition-In and Discovery Services supports prime contractors managing website projects for the County of San Mateo County Executive's Office. The scope of work focuses on initial discovery and transition services, including the review of DNS, hosting, and WordPress configurations to identify security risks, outdated components, and access dependencies. Additionally, the provider is responsible for establishing service request intake processes and escalation procedures in coordination with County TSD. The contractor must deliver a comprehensive operating plan and transition-in assessment within 10 business days of the Notice to Proceed. This engagement falls under NAICS code 541512, with a response deadline set for November 20, 2026.

County Executive's Office

POSTED

DEADLINE

Infrastructure and Database Performance ConsultantThe Infrastructure and Database Performance Consultant subcontract for the Texas Secretary of State focuses on evaluating the hosting environments and database schemas of prime contractors. The scope of work involves a detailed review of resource allocation, monitoring tools, and database design, specifically targeting normalization and indexing strategies to mitigate data integrity risks and resolve performance bottlenecks. The consultant will employ performance profiling tools to analyze system behavior under load to ensure stability and efficiency. Key deliverables for this engagement include a comprehensive infrastructure analysis report and a detailed set of database assessment findings. Interested parties should note that the solicitation was posted on November 4, 2026, with a response deadline of November 23, 2026. This opportunity falls under NAICS code 541512 and is managed through the Texas state government procurement system.

POSTED

DEADLINE

Texas Election Administration Management (TEAM) System Independent Technical Assessment

Solicitation # 3815

Solicitation Number 3815 is a Request for Proposal issued by the Texas Secretary of State for a six-week independent technical assessment of the Texas Election Administration Management (TEAM) system modernization project. The scope of work requires the selected contractor to evaluate technical architecture, code quality, infrastructure performance, database design, and alignment with statutory requirements, ultimately delivering a prioritized list of critical fixes and remediation strategies. The engagement begins from a kickoff date and may be extended at the sole discretion of the Secretary of State for further implementation support or oversight. Performance may be conducted remotely or on-site at provided SOS facilities. The contract will be awarded based on best value, with evaluation weights assigned as 40 percent to cost and financial proposals, 25 percent to technical methodology and RFP alignment, 25 percent to vendor experience and qualifications, and 10 percent to references and past history. Past performance is measured on a pass/fail basis via the Comptroller of Public Accounts Vendor Performance Tracking System. Proposals must be submitted electronically by November 23, 2026, and must include several required appendices, including a conflict of interest disclosure and a non-disclosure agreement. Contractors must adhere to strict compliance standards, including the SOS Prohibited Technology Policy, E-Verify usage, and Texas accessibility requirements under 1 T.A.C. Chapters 206 and 213. Insurance requirements include Commercial General Liability of 1 million dollars per occurrence and 2 million dollars aggregate, along with specific limits for workers compensation, employer liability, and automobile insurance. Payments are processed via reimbursement in accordance with the Texas Prompt Payment Act, with invoices due thirty calendar days after the receipt of service or a correct invoice.

POSTED

DEADLINE

Secure Data Handling and Reporting ServicesThe Secure Data Handling and Reporting Services subcontract provides essential secure infrastructure and data management for prime contractors working on facility projects for the Ministry of Environment and Parks in British Columbia. The scope of work focuses on the management of Building Data Summary spreadsheets and the delivery of final reports in signed, searchable PDF formats, all transmitted through secure channels. To ensure the integrity and security of the information, the provider must hold ISO/IEC 27001 certification or demonstrate full compliance with the Province of British Columbia IM/IT standards. This opportunity is categorized under NAICS code 541512, with a response deadline set for December 1, 2026.

Ministry of Environment and Parks

POSTED

DEADLINE

Senior Cúram Software Architecture ServicesThis subcontract opportunity with WorkSafeBC involves providing Senior Cúram Software Architecture Services to support the modernization of the Claims Management System. The selected prime contractor will be responsible for high-level technical leadership and architectural design, focusing on the planning and integration of data for enterprise applications that encompass over 2,000 screens and 500 data tables. Key deliverables include the creation of technical roadmaps, system configurations, and detailed architectural designs utilizing IBM Cúram versions 7 and 8. Qualified candidates must hold a Bachelor's degree in Computer Science or a related STEM field and possess legal eligibility to work in Canada. Interested parties must submit their responses by November 30, 2026. This project falls under NAICS code 541512 and is managed by the Province of British Columbia.

POSTED

DEADLINE

AIDMS Data Migration and Systems Integration SpecialistThis subcontract opportunity for an AIDMS Data Migration and Systems Integration Specialist involves the secure transfer of credentialing and cardholder data from legacy HID SAFE AIDMS to new systems for prime contractors on SFO airport security projects. The selected specialist will be responsible for executing Data Migration Plans for personally identifiable information and configuring external connectivity for the AS Web Portal, AS DAC, AS LAN, and AS EAP Access Lists. All work must be performed in accordance with SFO IT Technology Standards and DHS/CISA guidelines, culminating in the delivery of a migrated database and a fully integrated environment. Technical requirements for this role include specific expertise in Microsoft SQL Server 2022. The project is managed under NAICS code 541512 and is overseen by Procurement Services for the state of California. Interested parties must submit their responses by the deadline of December 4, 2026.

POSTED

DEADLINE

RFP 11159.46 Airport Identity Management System and Maintenance and Support Services

Solicitation # 11159.46

Solicitation 11159.46 is a Request for Proposals issued by the City and County of San Francisco for the San Francisco International Airport to procure an Airport Identity Management System (AIDMS) and associated maintenance and support services. The scope of work is divided into two primary phases: the first involves the design, installation, implementation, integration, and testing of the system software and hardware, and the second focuses on ongoing warranty, maintenance, and support. The project requires the contractor to provide comprehensive training and user documentation, as well as recommendations for workstations and peripherals. Final system acceptance is contingent upon the successful completion of all implementation phases and a 60-day stabilization test period. The procurement process utilizes a scored evaluation based on 100 possible points, preceded by a pass/fail screening of minimum qualifications. To qualify, proposers must be the original manufacturer of a commercially off-the-shelf system, not a reseller, and demonstrate at least two successful AIDMS implementations and five years of continuous support experience at medium or large hub U.S. airports. The contract includes strict compliance requirements, including adherence to San Francisco Administrative Code, prevailing wage laws, ADA and WCAG 2.1 Level AA accessibility standards, and DHS/CISA vulnerability management guidelines. Additionally, the agreement prohibits the use of generative artificial intelligence in deliverables without prior written approval and requires key personnel accessing personally identifiable information to maintain SFO badges. Proposals must be submitted via the OpenGov portal by December 4, 2026, and must remain valid for 180 days.

Procurement Services

POSTED

about 18 hours ago

DEADLINE

in 29 days

AI Contract Overview

The contract supports compliance with NIST SP 800-171 Revision 1 by enabling the development and implementation of a System Security Plan and associated safeguards for controlled unclassified information. This effort focuses on establishing and maintaining the necessary security controls to protect CUI within systems handling sensitive government data, ensuring alignment with federal cybersecurity requirements. The work involves assessing current security postures, identifying gaps, and executing remediation measures to meet all 110 controls outlined in the standard. This is a subcontract awarded under a Department of Defense procurement, classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 14, 2026, with a response deadline of July 17, 2026, indicating a short window for proposal submission. The place of performance and specific location details are not provided, suggesting the work may be conducted remotely or across multiple sites. The contract is managed by the ASC Supplier Oper OEM Division, and all activities must be completed in accordance with DoD cybersecurity expectations without reliance on external documentation or references.

General Info

Develop and implement NIST SP 800-171 Rev 1 security controls for CUI under DoD subcontract.

Agency

Department Of Defense → ASC SUPPLIER OPER OEM DIVISION

NAICS

541512 - Computer Systems Design Services

Place of Performance

USA

Set-Aside

NONE

Documents

This scope was carved out of SPE4A5-25-T-695M.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

PIN, STRAIGHT, HEADLE

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 14

subcontract

Response DeadlineJul 17

Deadline has passed

Submission Closed

07/17/2026, 05:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → ASC SUPPLIER OPER OEM DIVISION

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → ASC SUPPLIER OPER OEM DIVISION

Office AddressN/A

ContactsNo contact information available

Full Description

Support NIST SP 800-171 Rev 1 compliance including System Security Plan (SSP) development and implementation of safeguards for controlled unclassified information (CUI).