Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Cybersecurity for Covered Defense Information (CDI)

Closed
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512
New
SLED
Cybersecurity Maturity Model Certification (CMMC) Program Services
Solicitation # 09112026
The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.
University of Arkansas Fayetteville (UAF)

POSTED

about 1 hour ago

DEADLINE

N/A
NAICS: 541512
New
SLED
Pre-Solicitation for CSBP Business Modernization
Solicitation # OIS-25-26-020
The California Department of Consumer Affairs, through the State Board of Pharmacy, is seeking a contractor to modernize its business operations by replacing aging legacy systems with a cloud-based Software as a Service solution. This project, identified as solicitation OIS-25-26-020, aims to implement a comprehensive system for application, renewal, compliance, payment, inspection, and reporting. The contractor will be responsible for the design, configuration, integration, deployment, and ongoing maintenance of the solution using a hybrid-agile scrum methodology. The project is structured into four phases, with a base contract term of 36 months and a timeline spanning from October 2027 through October 2030. The solution must adhere to strict technical and security standards, including WCAG 2.2 Level AA for accessibility and NIST SP 800-53 Rev. 5 and the NIST Cybersecurity Framework for security. Compliance with FedRAMP and California SAM/SIMM policies is required, and the system must integrate with DCA/OIS Single Sign-On for role-based access control. Evaluation of bidders will be based on a point system regarding how functional requirements are met, favoring out-of-the-box capabilities over customization, and will include a cost evaluation covering base deliverables, maintenance, and continuous enhancements.
California Department of Consumer Affairs

POSTED

3 days ago

DEADLINE

in 28 days

AI Contract Overview

Show more

The contract requires the implementation and ongoing monitoring of NIST SP 800-171 controls to safeguard Covered Defense Information (CDI) held by the contractor, ensuring compliance with federal cybersecurity standards for defense contractors. All systems handling CDI must be configured to meet the specified technical and procedural safeguards outlined in the NIST framework, with continuous assurance that these controls remain effective throughout the performance period. Any cyber incident involving CDI must be reported to the appropriate government authorities within 72 hours, as mandated by DFARS requirements, and the contractor is responsible for maintaining detailed documentation of all incident responses and remediation efforts. This is a subcontract under the Department of Defense, issued by the ASC Commodity Division, with performance required at Robins Air Force Base, Georgia, 31098-1887. The NAICS code 541512 indicates this relates to custom computer programming services, suggesting the scope may include IT systems, software development, or cybersecurity support tied to defense operations. The solicitation was posted on July 13, 2026, and responses are due by July 16, 2026, indicating a tight turnaround for qualified subcontractors to demonstrate their ability to meet stringent cybersecurity obligations in a defense context.

General Info

Implement NIST SP 800-171 controls for CDI, report cyber incidents within 72 hours, comply with DFARS at Robins AFB.

NAICS

541512 - Computer Systems Design Services

Place of Performance

ROBINS A F B, GA, 31098-1887, USA

Set-Aside

NONE

Documents

This scope was carved out of SPE4A6-26-T-03CX.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RECEPTACLE, TURNLOCK FASTENER

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed
Posted

subcontract

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → ASC COMMODITIES DIVISION
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implementation and monitoring of NIST SP 800-171 controls to protect CDI, including cyber incident reporting within 72 hours as required by DFARS.

More opportunities from Department Of Defense → ASC COMMODITIES DIVISION

Same awarding agency

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS