This Subcontract opportunity from Department Of Defense was posted on July 13, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Defense Industrial Base Cybersecurity Compliance (NIST SP 800-171)

Closed

Federal

Submission Closed07/24/2026, 12:00:00 PM CDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Cybersecurity Testing and Assurance ProviderThe United Kingdom Sports Council is seeking a Cybersecurity Testing and Assurance Provider to serve as a subcontractor for digital projects. The selected provider will perform independent security and penetration testing for prime contractors, focusing on vulnerability management, security monitoring, and the validation of Secure by Design implementations. These tasks will be executed using specialized penetration testing software and scanners to ensure the integrity of digital assets. The provider is responsible for delivering comprehensive security testing reports, remediation records, and necessary assurance evidence. Key deliverables include the creation of detailed remediation plans to address identified vulnerabilities. Interested parties must submit their responses by December 11, 2026, in accordance with the solicitation posted on November 9, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Digital development partner and content management system platform implementation

Solicitation # DIG0911

The United Kingdom Sports Council is seeking a digital development partner to design, build, migrate, and launch a new website powered by a headless Software as a Service (SaaS) content management system. The project aims to replace the existing Sitecore structure with a user-centered, secure, and accessible digital experience, with a target go-live date of September 1, 2027. The contract spans four years, with the first year focusing on implementation and the subsequent three years dedicated to ongoing support and continuous improvement. The total budgeted value for the four-year term is up to 310,000 GBP, including VAT, which covers the initial build, CMS licensing, and annual support retainers. The successful supplier must adhere to strict technical and security standards, including the UK Government Secure by Design framework, WCAG 2.2 Level AA accessibility, and ISO/IEC 27001:2022 and Cyber Essentials Plus certifications. All data must be stored and handled within the United Kingdom, with encryption required both at rest and in transit. Award evaluation is based on a 100% weighting, distributed between quality of services (40%), pricing (20%), and relevant experience and track record (20%), with additional requirements for environmental sustainability and equality, diversity, and inclusion compliance. Proposals must be submitted by December 11, 2026.

The United Kingdom Sports Council

POSTED

DEADLINE

Request for Information (RFI) on Artificial Intelligence (AI) Uses for Cislunar Space Vehicle Operations

Solicitation # 110926-2

Department Of The Air Force

POSTED

DEADLINE

SOLICITATION_SERVICENOW STAFF AUGMENTATION SERVICES

Solicitation # N5523627Q0003

Southwest Regional Maintenance Center

POSTED

DEADLINE

Solicitation # MNPS000086

Metropolitan Nashville Public Schools is seeking a qualified contractor to provide, implement, and support a centralized Computer-Aided Dispatch and incident management system. This system is intended to enhance district-wide safety and security operations across all MNPS facilities and affiliated charter schools, specifically focusing on real-time incident tracking, emergency response coordination, alarm monitoring, dispatch operations, and detailed reporting and analytics. The solicitation, identified as MNPS000086, was posted on November 6, 2026, with a response deadline of November 26, 2026. The project will be performed in Tennessee and is managed by the Metro MNPS agency, with William Christopher Mundy serving as the primary point of contact for the procurement process.

POSTED

DEADLINE

High-Performance Computing (HPC) Infrastructure SupportThis subcontract for High-Performance Computing Infrastructure Support involves the technical management, maintenance, and optimization of GPU compute resources for prime contractors supporting State University of New York AI research projects. The scope of work focuses on managing high-density GPU clusters, specifically utilizing NVIDIA H100 and A100 hardware, alongside HPC scheduling software to handle compute resource allocation and system monitoring. The primary objective is to deliver a fully operational GPU compute environment, requiring specialized expertise in AI/ML infrastructure and HPC administration. Classified under NAICS code 541512, the contract ensures that the necessary computational power and system stability are maintained to support advanced academic research initiatives.

State University of New York (SUNY)

POSTED

DEADLINE

Financial Data Migration ServicesThis subcontract for Financial Data Migration Services involves providing extract, transform, and load services for historical financial data related to prime contractors on SUNY Upstate Medical University projects. The scope of work includes performing data auditing, scrubbing legacy financial records, mapping data fields, and conducting migration testing utilizing SQL databases and specialized ETL tools to ensure the successful delivery of validated data into the Strata system. Managed under the State University of New York, the contract falls under NAICS code 541512. A critical requirement of the engagement is strict adherence to HIPAA data privacy compliance to protect sensitive information throughout the migration process.

State University of New York (SUNY)

POSTED

DEADLINE

Traffic Data Systems Implementation and Integration ServicesThe Traffic Data Systems Implementation and Integration Services subcontract involves providing specialized technical setup and data migration for prime contractors working on SaaS projects for the Maine Department of Transportation. The scope of work focuses on configuring a platform for traffic monitoring, migrating historical data from legacy systems, and ensuring seamless integration with existing workflows through rigorous deployment testing. In addition to the technical implementation, the contractor is responsible for delivering a fully configured and tested production environment and providing comprehensive staff training on system administration. This project falls under NAICS code 541512 and is managed by the State of Maine's Department of Transportation.

POSTED

DEADLINE

Card Tokenization and Secure Vaulting ProviderThis subcontract agreement establishes a Card Tokenization and Secure Vaulting Provider for prime contractors working on UNICEF Asia Pacific Regional Office projects in Thailand. The primary objective is the implementation of a secure system that replaces sensitive cardholder data with unique tokens, utilizing network token services and comprehensive vault management. Key deliverables include a fully functional tokenization platform and a secure token vault capable of handling token migration and account updater services. To ensure the highest standards of data protection, the provider must maintain PCI DSS Level 1 Compliance and adhere to UNICEF Class I security controls. This engagement focuses on mitigating risk associated with sensitive financial data through advanced encryption and secure storage solutions within the specified regional operational framework.

POSTED

DEADLINE

Cloud and API System Integration DevelopmentThis subcontract for Cloud and API System Integration Development involves the creation of middleware and APIs to integrate cloud systems for prime contractors supporting UNHCR digital product projects. The scope of work focuses on executing REST and SOAP API design, system architecture mapping, and cloud-to-cloud integration to ensure seamless system connectivity and functional API delivery. The project is managed by UNHCR and requires strict adherence to the Special Conditions of Cloud Computing as outlined in Annex G. Performance of these services will take place across multiple destinations, with the primary objective of establishing robust integration between diverse cloud environments.

POSTED

DEADLINE

Digital Product Development and Technology Services Gabor Andrasi - [email hidden] simona paola mosconi - [email hidden]

Solicitation # UNHCR_RFP_3565

The United Nations High Commissioner for Refugees (UNHCR) is seeking to establish a Frame Agreement for digital product development and technology services under solicitation number UNHCR_RFP_3565. This requirement is structured into five distinct lots: Drupal development and support, Drupal hosting for the main platform, conversion optimization and experimentation, cloud and API system integration development, and the development, hosting, and support of a UTM campaign tool. The project involves multiple performance destinations and is managed by the UNHCR Procurement Section, with Gabor Andrasi and Simona Paola Mosconi serving as primary points of contact for technical and administrative issues. The solicitation includes several critical regulatory and operational frameworks, including a Supplementary Agreement Concerning the Protection of Personal Data, Special Conditions of Cloud Computing, and the UN Supplier Code of Conduct. Bidders are required to submit technical and financial offers using specific forms and must complete the UNHCR Vendor Registration Form for Commercial Suppliers. All information within the RFP is proprietary to UNHCR. The deadline for submitting questions regarding the solicitation is 14:00 CET on November 26, 2026.

UNHCR

POSTED

about 18 hours ago

DEADLINE

N/A

AI Contract Overview

The contract requires the implementation and comprehensive documentation of cybersecurity controls outlined in NIST Special Publication 800-171 to protect covered defense information within the defense industrial base. This effort is mandated to ensure full compliance with the Defense Federal Acquisition Regulation Supplement clauses 252.204-7012 and 252.204-7997, which govern the safeguarding of controlled unclassified information in nonfederal systems. All cybersecurity measures must be thoroughly documented and aligned with NIST standards to demonstrate adherence to federal requirements for handling sensitive defense data. This is a subcontract under the Department of Defense, specifically tied to Land Supplier Operations Vehicle Support, with performance expected at Tinker Air Force Base, Oklahoma, zip code 73145-8000. The solicitation was posted on July 13, 2026, with a response deadline of July 24, 2026. The NAICS code 541512 identifies the industry as Computer Systems Design and Related Services, indicating the technical expertise necessary to fulfill the cybersecurity implementation and documentation tasks. The contract is not subject to any specific set-aside designation, and all interested parties must meet the technical, procedural, and compliance requirements outlined by the referenced regulations and standards.

General Info

Implement NIST 800-171 controls for CUI protection at Tinker AFB under DOD subcontract.

Agency

Department Of Defense → LAND SUPPLIER OPNS VEHICLE SPT

NAICS

541512 - Computer Systems Design Services

Place of Performance

TINKER AFB, OK, 73145-8000, USA

Set-Aside

NONE

Documents

This scope was carved out of SPE7L3-26-T-116C.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

SEAL, PLAIN

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJul 13

subcontract

Response DeadlineJul 24

Deadline has passed

Submission Closed

07/24/2026, 12:00:00 PM CDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → LAND SUPPLIER OPNS VEHICLE SPT

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → LAND SUPPLIER OPNS VEHICLE SPT

Office AddressN/A

ContactsNo contact information available

Full Description

Implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information and comply with DFARS clauses 252.204-7012 and 252.240-7997.