This Subcontract opportunity from Department Of Defense was posted on August 24, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Defense Industrial Base Cybersecurity Compliance (NIST SP 800-171)

Closed

Federal

Submission Closed09/04/2026, 01:00:00 PM EDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Government Technology (GovTech) Advisor

Brownsville Housing Authority

POSTED

DEADLINE

Pre-Solicitation for CSBP Business Modernization

Solicitation # OIS-25-26-020

The California Department of Consumer Affairs, through the State Board of Pharmacy, is seeking a contractor to modernize its business operations by replacing aging legacy systems with a cloud-based Software as a Service solution. This project, identified as solicitation OIS-25-26-020, aims to implement a comprehensive system for application, renewal, compliance, payment, inspection, and reporting. The contractor will be responsible for the design, configuration, integration, deployment, and ongoing maintenance of the solution using a hybrid-agile scrum methodology. The project is structured into four phases, with a base contract term of 36 months and a timeline spanning from October 2027 through October 2030. The solution must adhere to strict technical and security standards, including WCAG 2.2 Level AA for accessibility and NIST SP 800-53 Rev. 5 and the NIST Cybersecurity Framework for security. Compliance with FedRAMP and California SAM/SIMM policies is required, and the system must integrate with DCA/OIS Single Sign-On for role-based access control. Evaluation of bidders will be based on a point system regarding how functional requirements are met, favoring out-of-the-box capabilities over customization, and will include a cost evaluation covering base deliverables, maintenance, and continuous enhancements.

California Department of Consumer Affairs

POSTED

DEADLINE

Data Security Compliance SpecialistThis subcontract for a Data Security Compliance Specialist supports the Florida Department of Revenue by providing technical implementation of logical access controls for prime contractors. The scope of work focuses on establishing least-privilege principles and deploying security controls for application code and databases, alongside the enforcement of physical access restrictions. The selected provider will utilize identity and access management software and encryption tools to ensure strict adherence to Chapter 119, F.S. and s. 501.171, F.S., ultimately delivering a fully documented security architecture. The opportunity is categorized under NAICS code 541512 and was posted on November 6, 2026. Interested parties must submit their responses by the deadline of February 5, 2027. This engagement is designed to strengthen the overall security posture of the agency's projects through rigorous compliance and technical safeguards.

Department of Revenue

POSTED

DEADLINE

TPAS Hardware and Systems IntegrationThis subcontract for the Florida Department of Transportation involves the installation and systems integration of the Truck Parking Availability System (TPAS) for prime contractors. The scope of work includes the procurement, installation, and testing of critical hardware such as TPAS cameras, fixed mounting brackets, surge protection devices, and system cabinets. Additionally, the contractor is responsible for configuring IP addressing schemes and integrating all hardware with the existing Intelligent Transportation Systems infrastructure. To ensure operational success, the contractor must complete ITSFM data collection training and deliver a fully functional, tested, and integrated system. This project falls under NAICS code 541512, with a response deadline set for November 19, 2026.

Florida Department of Transportation

POSTED

DEADLINE

CMS / Administrative Interface DevelopmentThis subcontract focuses on the development of a user-friendly administrative control interface designed for prime contractors working on North Dakota Department of Health and Human Services projects. The primary objective is to implement a CMS framework and template editors that provide no-code or low-code interfaces for text and content modifications. A critical component of the project is the establishment of permission-based access, allowing specific business units to edit templates securely. The final deliverable is a fully functional administrative control module that must adhere to WCAG 2.1 Level AA accessibility standards. This project falls under NAICS code 541512 and is managed through the state of North Dakota. Interested parties should note the response deadline of November 14, 2026.

POSTED

DEADLINE

Generation Replacement Software 325-26-050-045

Solicitation # 325-26-050-045

The North Dakota Department of Health and Human Services, Economic Assistance Division, has issued a Request for Information (RFI) under solicitation number 325-26-050-045 for Generation Replacement Software. The primary objective is to acquire a scalable and extensible correspondence solution for creating and maintaining client notices. A critical requirement of the software is to ensure ADA compliance by meeting Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards and Federal regulations, with a compliance deadline of April 24, 2026. The desired system must allow business units to modify text and content independently without requiring technical assistance from a development team. This action is strictly a pre-solicitation RFI intended for strategic input and information gathering; it is not a solicitation for bids or proposals, and no contract award will result directly from this process. The state is seeking guidance on realistic project timelines, average total costs for initial implementation and ongoing maintenance, and recommended costing templates for future comparisons. Interested parties should coordinate with Procurement Officer Alex Hennix, with an RSVP deadline of November 13, 2026, for those wishing to participate in virtual discussions.

POSTED

DEADLINE

Cybersecurity and System Security PlanningThis subcontract for Cybersecurity and System Security Planning supports prime contractors on projects for the Texas Health and Human Services Commission. The scope of work focuses on performing comprehensive security assessments and developing critical security documentation, specifically the System Security Plan and Security Assessment Reports. Additionally, the provider is responsible for ensuring all deliverables adhere to the agency's established data quality and naming standards. The opportunity is categorized under NAICS code 541512 and was posted on November 6, 2026, with a response deadline of December 9, 2026. Interested parties can find further details through the Texas SmartBuy portal under solicitation HHS0015684.

Health and Human Services Commission

POSTED

DEADLINE

Laboratory Information Solution Maintenance

Solicitation # HHS0015684

The Texas Health and Human Services Commission (HHSC) is seeking a qualified contractor to provide comprehensive maintenance and support for its Laboratory Information Solution. The scope of work includes the upkeep of all system elements, interfaces, and necessary third-party software, with a requirement for support availability 24 hours a day, 365 days a year. Key deliverables include technical assistance for system resolutions, interface maintenance compliant with HL7 standards, and the provision of 22 additional user licenses to reach a total of 150. The project is structured into three phases: Transition, Operations, and Turnover, with an anticipated start date of April 2027. To qualify, respondents must possess at least five years of experience developing information technology for a laboratory information management system (LIMS) and demonstrate financial solvency. Award selection is based on best value, weighted by cost (35%), technical proposal (30%), experience and qualifications (20%), and project work plan (15%). Contractors must adhere to strict cybersecurity training, assist in developing a System Security Plan, and comply with HHSC data quality and naming standards. Payments are processed within 30 days of receipt of a correct invoice in accordance with the Texas Prompt Payment Act.

Health and Human Services Commission

POSTED

DEADLINE

Solicitation # BPM059590

The Maryland Department of Health Developmental Disabilities Administration is soliciting proposals for a secure, scalable cloud-based data analytics capability to serve as an enterprise asset. This single-award, firm-fixed-price contract aims to integrate claims and program data to improve visibility, identify emerging risks and anomalies, and provide actionable insights through a three-tier analytics framework utilizing deterministic rules, statistical outlier modeling, and network analysis. The project includes the delivery of executive dashboards and repeatable analytical workflows, with a final completion deadline of June 30, 2027. The estimated contract value is 5 million dollars, funded by the FY 2027 Budget Bill. Proposals must be submitted via the eMMA portal in a two-part submission consisting of a technical volume and a financial volume. Technical evaluations will be weighted more heavily than financial factors, focusing on the offeror's experience with complex healthcare or Medicaid datasets and the qualifications of key personnel, including a Project Manager and Subject Matter Experts. The procurement establishes a 7 percent Minority Business Enterprise and a 1 percent Veteran-Owned Small Business Enterprise participation goal. Awardees must adhere to State of Maryland DoIT information security policies and maintain cyber security insurance of at least 3 to 5 million dollars per occurrence.

POSTED

DEADLINE

Case Management Software for Hidalgo County Community Service Agency

Solicitation # 26-0480-11-06-03-REBID

Hidalgo County is soliciting proposals under RFP No. 26-0480-11-06-03-REBID for a cloud-based case management software system to support the Community Service Agency. The required solution must feature a secure, mobile-friendly, bilingual client portal and staff-assisted intake system capable of handling bilingual application intake, eligibility administration, document management, and AI-integrated communications. The system must comply with strict records-retention laws and cybersecurity standards, including HIPAA, the HITECH Act, and Texas Health and Safety Code regulations regarding protected health information. The procurement process evaluates vendors based on four equally weighted criteria: experience and qualifications, proposed implementation approach, references, and pricing. Award decisions will be made following a preliminary evaluation and a Best and Final Offer negotiation process. The resulting contract will be a service agreement with a one-year base term and optional renewals, requiring the vendor to maintain comprehensive general liability, automobile, and workers compensation insurance. Submissions must be made either electronically via the portal or through a physical hard copy and USB delivery, with a primary deadline of November 6, 2026, at 3:00 pm CST. Required documentation includes a HUB declaration, certification regarding debarment, a non-collusion affidavit, and a conflict of interest questionnaire. Because the project involves federal funding, the contract incorporates mandatory federal provisions, including 2 CFR 200 clauses, Title VI nondiscrimination assurances, and Byrd Anti-Lobbying certifications.

Community Service Agency

POSTED

DEADLINE

IT Operational Audit and Systems AlignmentThe IT Operational Audit and Systems Alignment subcontract for Houston City College focuses on evaluating technology stack efficiency and ensuring IT service alignment for prime contractors. The scope of work includes auditing software licenses, assessing IT ticketing workflows, and evaluating the integration of Student Information Systems and Enterprise Resource Planning systems. These evaluations must be conducted using established COBIT or ITIL frameworks to ensure industry-standard compliance. Qualified candidates must hold CISA or ITIL certifications to be eligible for this engagement. The primary deliverables for the project are a comprehensive IT Operational Efficiency Audit and a strategic Technology Roadmap. Interested parties should note the response deadline of December 11, 2026, for this Texas-based opportunity categorized under NAICS code 541512.

HOUSTON CITY COLLEGE

POSTED

about 21 hours ago

DEADLINE

in about 1 month

AI Contract Overview

This subcontract opportunity, titled Defense Industrial Base Cybersecurity Compliance (NIST SP 800-171), is issued by the Department of Defense through Construction & Equipment MRO SVC I. The project focuses on the implementation of NIST SP 800-171 controls to protect Covered Defense Information, specifically requiring the development of a System Security Plan and the establishment of cyber incident reporting protocols. The work is designated under NAICS code 541512 and will be performed in New Cumberland, Pennsylvania. The contract is specifically set aside for Women-Owned Small Businesses. Interested parties must submit their responses by the deadline of September 4, 2026. This effort ensures that defense industrial base partners maintain the necessary cybersecurity posture to safeguard sensitive government data.

General Info

DoD NIST SP 800-171 cybersecurity compliance subcontract for women-owned small businesses in Pennsylvania.

Agency

Department Of Defense → CONSTRUCTION & EQUIPMENT MRO SVC I

NAICS

541512 - Computer Systems Design Services

Place of Performance

NEW CUMBERLAND, PA, 17070-5002, USA

Set-Aside

WOSB

Documents

This scope was carved out of SPE8E9-26-T-3574.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

PLATE, METAL

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedAug 24

subcontract

Response DeadlineSep 4

Deadline has passed

Submission Closed

09/04/2026, 01:00:00 PM EDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → CONSTRUCTION & EQUIPMENT MRO SVC I

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → CONSTRUCTION & EQUIPMENT MRO SVC I

Office AddressN/A

ContactsNo contact information available

Full Description

Implementation of NIST SP 800-171 controls to safeguard Covered Defense Information, including System Security Plan development and cyber incident reporting.