Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Subcontract opportunity from Department Of Defense was posted on October 15, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

DoD Risk Management Framework (RMF) and Authority to Operate (ATO) Specialist

Closed
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512
New
SLED
Cybersecurity Maturity Model Certification (CMMC) Program Services
Solicitation # 09112026
The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.
University of Arkansas Fayetteville (UAF)

POSTED

about 2 hours ago

DEADLINE

N/A
NAICS: 541512
New
SLED
Pre-Solicitation for CSBP Business Modernization
Solicitation # OIS-25-26-020
The California Department of Consumer Affairs, through the State Board of Pharmacy, is seeking a contractor to modernize its business operations by replacing aging legacy systems with a cloud-based Software as a Service solution. This project, identified as solicitation OIS-25-26-020, aims to implement a comprehensive system for application, renewal, compliance, payment, inspection, and reporting. The contractor will be responsible for the design, configuration, integration, deployment, and ongoing maintenance of the solution using a hybrid-agile scrum methodology. The project is structured into four phases, with a base contract term of 36 months and a timeline spanning from October 2027 through October 2030. The solution must adhere to strict technical and security standards, including WCAG 2.2 Level AA for accessibility and NIST SP 800-53 Rev. 5 and the NIST Cybersecurity Framework for security. Compliance with FedRAMP and California SAM/SIMM policies is required, and the system must integrate with DCA/OIS Single Sign-On for role-based access control. Evaluation of bidders will be based on a point system regarding how functional requirements are met, favoring out-of-the-box capabilities over customization, and will include a cost evaluation covering base deliverables, maintenance, and continuous enhancements.
California Department of Consumer Affairs

POSTED

1 day ago

DEADLINE

in 29 days
NAICS: 541512
New
SLED
Artificial Intelligence and Information Technology Technical Support and Advising Services
Solicitation # TRS000658
The Teacher Retirement System of Texas is soliciting professional Artificial Intelligence (AI) and General Information Technology (IT) technical and advisory services under solicitation TRS000658. The scope of work includes strategic planning, solution design, implementation, optimization, and ongoing advisory services, specifically covering AI strategy and the operationalization of Generative AI solutions. All engagements will be managed through a Work Order process, with specific deliverables, pricing, and acceptance criteria defined on a per-engagement basis. The resulting contract is expected to have a single four-year term, with the majority of work performed remotely, although onsite requirements may be negotiated for specific events like training. To be considered responsive, prime contractors must demonstrate a minimum of ten years of experience providing enterprise-wide IT support to organizations with over 1,000 employees and ten years of experience supporting public sector organizations. Additionally, firms must provide documentation of successful project delivery in both AI and traditional IT within the preceding two years. Awards will be based on best value standards, and TRS reserves the right to make a single award, multiple awards, or no award. Payment will be made in arrears, either on an hourly basis for time-and-materials work orders or based on accepted milestones for deliverable-based work orders, requiring mandatory written acceptance from TRS. All technical solutions must align with the TRS AI Governance Framework and meet WCAG 2.1 Level AA accessibility standards.
Teacher Retirement System of Texas

POSTED

1 day ago

DEADLINE

in 10 days

AI Contract Overview

Show more

This subcontract opportunity is for a DoD Risk Management Framework (RMF) and Authority to Operate (ATO) Specialist to support prime contractors on Army Aberdeen Test Center projects. The selected provider will be responsible for the analysis, planning, execution, and maintenance of RMF activities to establish and sustain ATO certifications for various systems, including ATC LAN, LIN, STE, and T&EN. Key duties include maintaining security controls and compliance documentation in strict accordance with Department of Defense RMF standards. The work will be performed at Aberdeen Proving Ground, and all personnel must possess a Secret security clearance. The primary deliverables for this engagement are established and maintained ATO certifications and complete RMF compliance packages. This requirement falls under NAICS code 541512 and is managed through the Department of Defense agency W6QK Acc-Apg.

General Info

DoD RMF and ATO Specialist for Army projects at Aberdeen Proving Ground.

NAICS

541512 - Computer Systems Design Services

Place of Performance

Aberdeen Proving Ground, MD, 21005, USA

Set-Aside

NONE

Documents

This scope was carved out of W91CRB-26-B-A006.

The full solicitation package (10 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Cyber Security Engineering and Risk Management Framework Support

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed
Posted

subcontract

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → W6QK Acc-Apg
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Performs RMF analysis, planning, execution, and maintenance for prime contractors on Army Aberdeen Test Center (ATC) projects. Conducts RMF activities to establish and maintain ATO for ATC LAN, LIN, STE, and T&EN systems. Maintains compliance documentation and security controls per DoD RMF standards. Secret security clearance required. Delivers established and maintained ATO certifications and RMF compliance packages.

More opportunities from Department Of Defense → W6QK Acc-Apg

Same awarding agency

NAICS: 541330
New
Federal
Marketplace for Acquisition of Professional Services (MAPS)
Solicitation # W15P7T-26-R-A006
The Marketplace for Acquisition of Professional Services (MAPS) is a Multiple Award Indefinite Delivery Indefinite Quantity (IDIQ) contract issued by the Army Contracting Command-Aberdeen Proving Ground. This vehicle combines the previous RS3 and ITES-3S contracts to provide the Army, Department of War agencies, and other federal entities with uncommon knowledge-based professional and information technology services worldwide, including CONUS, OCONUS, and hostile areas. The contract supports five primary technical domains: Engineering, Logistics and Operational Services; Research, Development, Test and Evaluation (RDT&E) Services; Management and Advisory Services; Emerging IT Services; and Foundational IT Services. The contract structure consists of a five-year base period with a five-year optional ordering period, utilizing a firm fixed price pricing arrangement with a maximum total contract value of 50 billion dollars. The government intends to make 70 awards per domain, distributed among 30 large businesses (including 15 reserved for emerging large businesses), 25 small businesses, and 15 commercial-sector vendors. Awards are based on the highest rated technical offerors provided the price is fair and reasonable, with no tradeoffs considered between cost and non-cost factors. Evaluation is conducted via a structured scorecard system that validates offeror-submitted scores through supporting documentation, focusing on certifications such as ISO 9001 and CMMC Level 2, facility clearances, and past performance recency and relevance. Recent amendments have introduced the ability for small businesses to submit proposals via Small Business Teaming Arrangements (SBTA). All proposals must be submitted through the Digital Market Portal, with supporting controlled unclassified information provided via DoD Safe.
Engineering Services

POSTED

2 days ago

DEADLINE

in 22 days
View Details
NAICS: 541519
New
Federal
Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services
Solicitation # W91CRB-27-B-A001
Solicitation W91CRB-27-B-A001 is an 8(a) set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to benefit the Aberdeen Test Center in Maryland. The contractor is required to provide all personnel, equipment, and non-personal services necessary to analyze, plan, execute, and maintain system Authority to Operate (ATO) and RMF compliance. The period of performance begins November 23, 2026, and extends through November 22, 2031, consisting of a base year and four option years, with an additional six-month extension option. The contract is structured as a Firm Fixed Price agreement with labor hours based on 2,040 hours per year per labor category, including provisions for surge support. Bidders must be responsive to strict technical and security requirements to avoid rejection. Mandatory qualifications include an active Secret Facility Security Clearance at the time of bid, with a Top Secret clearance required at award. Key personnel requirements are rigorous, specifically requiring an IT Solutions Architect Sr. with a CISSP certification and 10 years of RMF experience, while other IT professionals must hold a CASP+ or equivalent certification with 5 years of experience. Bids must be submitted as a single electronic volume by November 12, 2026, and will be evaluated based on responsiveness and the Total Evaluated Price. Performance will be monitored via a Quality Assurance Surveillance Plan focusing on ATO compliance, transition-in timeliness, and financial reporting accuracy.
Other Computer Related Services

POSTED

2 days ago

DEADLINE

in 4 days
View Details
NAICS: 334516
New
Federal
Request for Information (RFI) Enhanced Maritime Biological Detection (EMBD) Identification Subsystem (IDS)
Solicitation # W911SR-27-RFI-EIDS
The Department of War, through the Joint Product Manager for Chemical, Biological, Radiological and Nuclear Sensing, is conducting market research via Request for Information W911SR-27-RFI-EIDS to identify industry sources for an Identification Subsystem (IDS). This system is intended as a backward-compatible replacement for the Joint Biological Point Detection System Identifier and will be integrated into the U.S. Navy's Enhanced Maritime Biological Detection system. The IDS must provide automated, confirmatory identification of various Biological Warfare Agents, including bacteria, viruses, and toxins, from liquid samples. Key technical requirements include a compact, modular enclosure suitable for shipboard installation, the use of military-standard circular connectors, and compliance with naval surface ship environmental profiles, specifically referencing MIL-STD-810H and MIL-STD-461. Interested respondents must submit a PDF response no later than December 7, 2026, including organization details, a capability statement, a gap analysis, and a Rough Order of Magnitude for cost and schedule. To access the restricted CUI Technical Specification Summary, vendors must provide evidence of security compliance, including a CMMC Level 2 self-assessment and adherence to DFARS 252.204-7012 and 252.204-7019/7020. Responses are limited to ten pages and must be sent to the designated Contract Specialist and Contracting Officer. This RFI is for planning purposes only and does not constitute a formal solicitation or a commitment to contract.
Analytical Laboratory Instrument Manufacturing

POSTED

2 days ago

DEADLINE

in 29 days
View Details

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS