This Subcontract opportunity from California was posted on June 11, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Information Security and Confidentiality Compliance

Closed

State & Local

Submission Closed07/09/2026, 05:00:00 PM PDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Security System Integration and VMS ConfigurationThis subcontract for Security System Integration and VMS Configuration involves providing specialized programming, configuration, and integration services for the Video Management System and network environment at Texas Southern University. The selected contractor will work under prime contractors on campus perimeter projects to configure VMS software, network servers, and cybersecurity settings, ensuring secure network access and successful system commissioning. The ultimate goal is the delivery of a fully operational, secure, and integrated surveillance system. The project falls under NAICS code 541512 and requires the contractor to hold specific VMS and network certifications. Interested parties must submit their responses by December 15, 2026. This opportunity is managed through the Texas Southern University system and focuses on enhancing the security infrastructure of the campus perimeter.

Texas Southern University

POSTED

DEADLINE

Migration & Transition ManagementThis subcontract for the Insurance Corporation of British Columbia involves the migration of traffic and services to new F5 solutions within ICBC IT infrastructure projects. The selected provider will be responsible for developing transition approaches and implementation schedules, managing complex dependencies, and executing parallel operations across multiple technologies to ensure stability in high-availability environments. The project requires specialized expertise in transition risk management to mitigate potential disruptions during the migration process. Key deliverables include the successful migration of services and the provision of detailed transition logs. This opportunity is categorized under NAICS code 541512 and is based in Canada.

Insurance Corporation of British Columbia

POSTED

DEADLINE

F5 BIG-IP Application Delivery and Security Technology Solution

Solicitation # NOI 8827

The Insurance Corporation of British Columbia (ICBC) has issued Notice of Intent 8827 to direct award the F5 BIG-IP Application Delivery and Security Technology Solution to F5 Networks Canada ULC. This decision is based on existing technical dependencies within ICBC's on-premises application delivery and cyber security environment. The scope of the solution encompasses local and global traffic management, load balancing, and the provision of hardware, virtual components, software, subscriptions, and licenses. A critical component of the requirement is the refresh of F5 hardware approaching end-of-support to ensure operational stability and continued platform maintenance. Following the direct award of the technology, ICBC intends to launch a competitive procurement process for an authorized F5 value-added reseller (VAR). The anticipated contract for the VAR will feature an initial three-year term with two optional one-year extensions, totaling a maximum potential term of five years. Potential respondents to the direct award decision must submit objections by November 20, 2026, demonstrating their ability to migrate F5-specific configurations and iRules without material redevelopment, maintaining operational continuity and a competitive total cost of ownership.

Insurance Corporation of British Columbia

POSTED

DEADLINE

Assessment Software Development and IntegrationThis subcontract for Assessment Software Development and Integration focuses on the design, development, and implementation of an integrated assessment software platform tailored for prime contractors serving Arizona school districts. The project requires the creation of software functionality that aligns strictly with Arizona Educational Standards and the integration of various assessment tools into a unified hosting environment, which may be cloud-based or on-premise. Managed by the Arizona Purchasing agency under NAICS code 541512, the contract aims to deliver a fully functional and integrated software solution. The solicitation was posted on November 10, 2026, with a response deadline set for January 14, 2027.

POSTED

DEADLINE

Investment Management Software and Product Support Services

Solicitation # 27-001

The Employees Trust Funds of Hawaii, under the Department of Budget and Finance, is soliciting quotes for investment management software and accompanying product support services via RFQ No. 27-001. The required software must provide advanced capabilities for portfolio exposure, historical analysis, private market functionality, CRM, and workflow management. A key technical requirement is the integration of artificial intelligence to enhance data analysis and workflows while strictly maintaining data confidentiality. Performance will take place in Hawaii, specifically on Oahu. The contract is governed by the AG-008 103D General Conditions, which establish the legal framework for independent contractor status, indemnification, and audit rights. Vendors must demonstrate strict compliance with Hawaii state laws, including the General Excise Tax Law, Employment Security Law, Temporary Disability Insurance, and the Prepaid Health Care Act. Required certifications include a Certificate of Good Standing and tax clearances from both the State of Hawaii and the IRS, which may be submitted through the Hawaii Compliance Express system. Payments will be issued upon the submission of original invoices certifying that all services have been performed according to the contract terms.

Department of Budget & Finance

POSTED

DEADLINE

Website Integration and Hosting ServicesThis subcontract for Website Integration and Hosting Services, managed by DAS Procurement for the state of Connecticut, focuses on integrating communications platforms with the web presences of East Hartford Public Schools. The selected prime contractor will be responsible for configuring embedded widgets and redirects for SchoolMessenger or PowerSchool Presence, ensuring all interfaces are mobile-responsive and properly hosted. A critical requirement of the project is strict adherence to ADA and WCAG 2.1 accessibility standards to ensure an inclusive user experience. The ultimate goal is to deliver a seamless web interface that connects the district website to its communication platforms. Interested parties must respond by December 10, 2026.

POSTED

DEADLINE

System Network Integration and Technical SupportThis subcontract for System Network Integration and Technical Support involves the supply and configuration of network controllers and hardware for prime contractors working on California Department of General Services facility projects. The scope of work includes the installation of Jenesys 4G LTE controllers, Netgear switches, RIB power supplies, and Lenovo i-7 tablets to deliver a fully configured network system. The project requires strict adherence to multiple technical and security standards, including ISO 35.110, IEEE 802.3, ANSI/TIA-568, NIST SP 800-53A Moderate, and CA State Administrative Manual Section 5300. This opportunity falls under NAICS code 541512, with a response deadline set for December 10, 2026.

California Department of General Services

POSTED

DEADLINE

Integrated Roadway Management Platform

Solicitation # 2128-RFP

The City of Rock Hill, South Carolina, is soliciting proposals under RFP 2128-RFP for a single, fully integrated roadway management platform to maintain approximately 205 centerline miles of roadway. The required software must provide a unified map, database, and workflow for roadway imagery, pavement and asset assessment, maintenance and capital planning, and work order management. Key technical requirements include smartphone-based data collection using ordinary vehicles, AI-powered identification and condition scoring of pavement distress and assets, remaining-service-life analysis, and GIS and API connectivity with existing City systems. The contract consists of an initial one-year term with up to four renewal options. Proposals must be submitted electronically via the City's e-Procurement Portal by 2:00 pm on December 10, 2026. Award decisions will be based on the highest-scoring proposal, evaluating product quality, past performance, and compliance with specifications. The selected vendor must provide all-inclusive annual services covering data collection, AI evaluation, licensing, and technical support. Contractual obligations include compliance with the South Carolina Illegal Immigration Reform Act and the Iran Divestment Act, as well as standard indemnification and non-discrimination policies. The City reserves the right to hold up to 10 percent retainage on monthly invoices to ensure satisfactory delivery of services.

POSTED

DEADLINE

AI Program Manager / Artificial Intelligence EngineerThis subcontract opportunity is for an AI Program Manager and Artificial Intelligence Engineer to support prime contractors on projects for the Massachusetts Executive Office of Public Safety and Security. The selected provider will be responsible for high-level program management and technical engineering for AI initiatives, overseeing the entire program lifecycle and providing specialized technical expertise to fulfill the statement of work. The contract is categorized under NAICS code 541512 and requires qualifications for ITS87 Category 1 for information technology contractors. Performance will take place in Boston, Massachusetts. Interested parties must respond by November 24, 2026.

Executive Office of Public Safety & Security

POSTED

DEADLINE

FY27_EOPSS_ITS87_Artificial Intelligence Engineer

Solicitation # BD-27-1044-EPS17-OTIS-135351

The Executive Office of Public Safety and Security (EOPSS) is seeking a Cloud AI Engineer to support the enhancement and management of a system-wide criminal justice data platform. This role is focused on accelerating AI adoption and implementing enterprise-scale solutions to integrate data from courts, police departments, and custodial institutions. The engineer will be responsible for architecting retrieval-augmented generation (RAG) solutions using vector databases and embedding models, integrating Model Context Protocol (MCP) servers, and managing AWS infrastructure using Terraform and CloudFormation. Key security requirements include implementing AWS IAM and Snowflake Role-Based Access Control (RBAC). The engagement is a full-time position of 37.5 hours per week, running through June 30, 2027, with a maximum all-inclusive hourly vendor bill rate of $125. Candidates must possess at least 10 years of experience in AWS cloud and data solutions. While the primary location is Milford, Massachusetts, there is a preference for candidates residing in Massachusetts or those able to travel to Milford, Boston, or Middleborough. Selected candidates must complete CORI and DCJIS fingerprinting requirements in Chelsea, Massachusetts. This procurement is eligible for the Small Business Purchasing Program, and vendors may submit a maximum of eight resumes via the COMMBUYS portal.

Executive Office of Public Safety & Security

POSTED

DEADLINE

Application Control & Zero Trust ImplementationThe Application Control and Zero Trust Implementation subcontract, issued by the Massachusetts Technology Collaborative, focuses on enhancing the security posture of prime contractors working on MassTech Rural Health Facility projects. The primary objective is to reduce the attack surface by implementing a managed application control environment utilizing the ThreatLocker technology stack. This initiative adheres to Zero Trust Architecture standards to regulate authorized applications, contain unauthorized software, and prevent lateral movement within the network. The project is categorized under NAICS code 541512 and will be performed in Westborough, Massachusetts. Interested parties can find further details through the provided COMMBUYS link, with a response deadline set for November 5, 2035.

Massachusetts Technology Collaborative

POSTED

about 17 hours ago

DEADLINE

in almost 9 years

AI Contract Overview

This subcontract, titled "Information Security and Confidentiality Compliance," requires adherence to the California Department of Managed Health Care's (DMHC) information security standards as detailed in Exhibit E-III. The contract mandates the implementation of robust data protection measures, comprehensive staff training on security protocols, and timely incident reporting to ensure confidentiality and safeguard sensitive information. The work falls under NAICS code 541512, indicating it involves computer systems design services related to information security. The solicitation was posted on June 11, 2026, with a response deadline of July 10, 2026. While specific location details and points of contact are not provided, the contract is managed by the California Department of Managed Health Care and focuses on sustaining compliance with state-mandated cybersecurity and confidentiality requirements. The contract aims to strengthen the agency's data security posture and ensure regulatory compliance through ongoing monitoring and personnel preparedness.

General Info

Subcontract mandates DMHC information security compliance, data protection, staff training, and incident reporting.

Agency

California Department of Managed Health Care

NAICS

541512 - Computer Systems Design Services

Place of Performance

CA, USA

Set-Aside

NONE

Documents

This scope was carved out of C26MC-0007.

The full solicitation package (3 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Voluntary Employees Beneficiary Association or Trust Fund Consulting Services

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJun 11

subcontract

Response DeadlineJul 9

Deadline has passed

Submission Closed

07/09/2026, 05:00:00 PM PDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyCalifornia Department of Managed Health Care

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia Department of Managed Health Care

Office AddressN/A

ContactsNo contact information available

Full Description

Ensure compliance with DMHC information security requirements, including data safeguards, staff training, and incident reporting under Exhibit E-III.

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS