This Subcontract opportunity from Government of Canada was posted on January 12, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

IT Audit and Cybersecurity Risk Assessment Services

Closed

International

Submission Closed01/27/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0417

This procurement, solicitation number SPE8EN-27-T-0417, is for the acquisition of 18 units of a digital computer system, specifically identified as a Commercial Off-The-Shelf item from Panasonic Corporation (P/N FZ-55DZ-0EKM) with NSN 7010-30-700-6647. The contract is managed by the Defense Logistics Agency (DLA) Troop Support, Construction and Equipment office. Delivery is required within 153 days after order, with a need ship date of April 26, 2027, and an original required delivery date of August 20, 2027. The items are to be delivered FOB Origin to the DLA Distribution San Joaquin facility in Tracy, California, with both inspection and acceptance occurring at the destination. The contract mandates strict adherence to technical and quality requirements found in the DLA Master List, which takes precedence over the general packaging standard ASTM D3951. All packaging and labeling must comply with MIL-STD-129, and palletization must follow RP001 requirements. Additionally, the contract prohibits the intentional addition of mercury or mercury compounds to hardware, except for specific functional exceptions. Legally, the agreement incorporates various FAR and DFARS clauses, including those regarding the Buy American Act, the Berry Amendment, and the safeguarding of covered defense information. Invoicing and payment must be processed electronically through the Wide Area WorkFlow (WAWF) system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

COMPUTER SYSTEM, DIGITA

Solicitation # SPE8EN-27-T-0414

Solicitation SPE8EN-27-T-0414 is a request for quotations issued by the DLA Troop Support Construction and Equipment office for the procurement of eight digital computer systems, identified by NSN 7010-01-722-2099 and part number REC-MA3001 from Rugged Science, LLC. The contract requires delivery within 153 days after order, with a need ship date of April 26, 2027, and a final required delivery date of August 21, 2027. Supplies are to be delivered FOB Origin to the DLA Distribution DDSP New Cumberland facility in Pennsylvania. The acquisition is governed by the DLA Master Solicitation for Automated Simplified Acquisitions and incorporates strict technical and quality requirements, including MIL-STD-129 for marking and MIL-STD-2073-1E for packaging. Key restrictions include a prohibition on the intentional addition of mercury to hardware, except for specific functional uses, and compliance with the Buy American and Balance of Payments Program. The contract also mandates rigorous cybersecurity standards, including DFARS 252.204-7012 for safeguarding covered defense information and NIST SP 800-171 assessment requirements. Payment and invoicing must be processed electronically through the Wide Area Workflow system.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

Airport Digital Twin Platform Implementation and Support Services

Solicitation # 2027-006-RFP

The Sanford Airport Authority is soliciting proposals under RFP 2027-006 for the implementation and support of an Airport Digital Twin Platform and an open, standards-based ecosystem at Orlando Sanford International Airport. The project aims to integrate disparate operational, maintenance, business, and facility systems into a common digital environment to enhance asset management, operational awareness, and facility stewardship. Initial implementation will focus on terminal and airfield infrastructure, specifically targeting performance monitoring, preventive and predictive maintenance, and engineering decision support. The platform is intended to complement existing systems of record rather than replace them, providing enhanced visualization, analytics, and dashboards. The procurement process is governed by a points-based evaluation focusing on the technical approach, implementation roadmap, respondent experience, team qualifications, training sustainability, and the five-year cost of ownership. Proposals were due by November 24, 2026, with a scheduled board award date of February 2, 2027. Selected providers must meet specific Florida insurance requirements, including Commercial General Liability and Professional Liability of at least 1,000,000 dollars, and comply with state regulations regarding scrutinized companies. The resulting contract will be non-exclusive, and the provider will be responsible for delivering a scalable platform along with comprehensive training for system administrators, IT, and executive users.

POSTED

DEADLINE

Technical Support & Account Management

POSTED

DEADLINE

System Integration & Data Migration Services

POSTED

DEADLINE

AI-Driven Fraud Detection and Transaction Security

POSTED

DEADLINE

Cisco Network Switch Procurement and ConfigurationThis subcontract agreement involves the procurement and configuration of Cisco network switches for prime contractors working on South African National Blood Service projects. The selected provider is responsible for supplying hardware according to the Bill of Quantities and ensuring all devices are configured to meet the specific technical requirements outlined in Annexure A. To be eligible, providers must hold a Cisco Portfolio Partner or Cisco Preferred Partner certification. The final deliverable consists of fully configured Cisco network switches delivered within South Africa. The response deadline for this opportunity is November 20, 2026.

South African National Blood Service

POSTED

DEADLINE

3CX Telephony Support and Maintenance

Information Technology

POSTED

DEADLINE

Network and Security Engineering Services

Information Technology

POSTED

DEADLINE

General Information Technology Services

Solicitation # 2026-008

The City of Zephyrhills, Florida, is soliciting proposals for comprehensive general information technology support and managed services under solicitation 2026-008. The selected consultant will supplement the City Information Technology Department by providing enterprise network, cybersecurity, cloud, systems, telecommunications, endpoint, backup, monitoring, and help desk services for both City and Police facilities. Key technical requirements include the provision of a specialized staffing plan featuring roles such as a Systems and Cloud Architect, Senior Network and Security Engineer, and Microsoft 365 Administrator. The vendor must be a WatchGuard Gold Partner or higher, a Microsoft partner, and a 3CX Partner. Critical performance standards include immediate remote response for critical issues and on-site response within two hours. Personnel assigned to Police or criminal justice environments must maintain FDLE CJIS background fingerprinting and certifications. The selection process is a multi-stage evaluation based on professional qualifications, where written responses are scored to create a short list of three firms for interviews. Final selection is based on the Evaluation Committee's ranking, with negotiations beginning with the top-ranked vendor. In the event of a tie, minority or female-owned firms are ranked higher. The contract is a cooperative purchase agreement subject to annual legislative fund appropriations. Vendors must comply with various regulatory standards, including the Americans with Disabilities Act, the Civil Rights Act of 1964 and 1968, and the Defense Department's requirements for covered telecommunications equipment. Required submission materials include a detailed technical approach, financial responsibility statements, and specific affidavits regarding human trafficking and foreign countries of concern.

Information Technology

POSTED

DEADLINE

ERP Integration & Data Migration SpecialistThis subcontract opportunity for an ERP Integration and Data Migration Specialist supports modernization projects for The Harris Center for Mental Health and IDD in Texas. The selected provider will be responsible for integrating new ERP systems with existing legacy technology and executing historical data migrations for prime contractors. Key technical requirements include API development, data mapping, and the implementation of ETL processes utilizing integration middleware and specialized data migration tools to deliver a fully integrated system environment. The solicitation was posted on November 11, 2026, with a response deadline of January 27, 2027. Classified under NAICS code 541512, the project focuses on delivering seamless system connectivity and accurate migrated data sets to enhance the agency's operational infrastructure.

HARRIS CENTER FOR MENTAL HEALTH

POSTED

1 day ago

DEADLINE

in 3 months

AI Contract Overview

The Government of Canada, through the Office of the Superintendent of Financial Institutions, is seeking a subcontractor to provide IT Audit and Cybersecurity Risk Assessment Services. The scope of work involves conducting IT-focused internal audits, cybersecurity risk assessments, system controls reviews, and data governance compliance for financial institutions. All services must be performed in strict alignment with OSFI’s Technology and Cyber Security Advisory guidelines. This opportunity is categorized under NAICS code 541512 and will be performed in Toronto and the National Capital Region. The solicitation was posted on January 12, 2026, with a response deadline set for January 27, 2026.

General Info

OSFI seeks IT audit and cybersecurity risk assessment services for Canadian financial institutions.

Agency

Government of Canada → Office of the Superintendent of Financial Institutions

NAICS

541512 - Computer Systems Design Services

Place of Performance

National Capital Region (NCR), Toronto, CAN

Set-Aside

NONE

Documents

This scope was carved out of 20250926.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Internal Audit Services RFP PASS Stream 1

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJan 12

subcontract

Response DeadlineJan 27

Deadline has passed

Submission Closed

01/27/2026, 07:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyGovernment of Canada → Office of the Superintendent of Financial Institutions

ContactsNo contacts available

OfficeN/A

Organization / AgencyGovernment of Canada → Office of the Superintendent of Financial Institutions

Office AddressN/A

ContactsNo contact information available

Full Description

Conduct IT-focused internal audits, cybersecurity risk assessments, system controls reviews, and data governance compliance for financial institutions in line with OSFI’s Technology and Cyber Security Advisory guidelines.

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Get full access

Join 750+ contractors already using CLEATUS