This Subcontract opportunity from Government of Canada was posted on February 4, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Security and Compliance Implementation

Closed

International

Submission Closed03/06/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Investment Management Software and Product Support Services

Solicitation # 27-001

The Employees' Trust Funds of Hawaii, under the Department of Budget and Finance, is soliciting quotes for investment management software and accompanying product support services via RFQ No. 27-001. The requested software must be capable of utilizing artificial intelligence to enhance workflows and analyze data while strictly maintaining confidentiality. Performance will take place in Oahu, Hawaii, and the successful vendor must adhere to professional quality standards and accreditation generally accepted in the field. Contractors must demonstrate strict compliance with various Hawaii Revised Statutes, including the General Excise Tax Law, Employment Security Law, Temporary Disability Insurance, and the Prepaid Health Care Act. Required certifications include a tax clearance certificate from the State of Hawaii and the IRS, a general excise tax license, and a certificate of compliance from the Department of Labor and Industrial Relations. Payments are processed upon the submission of original invoices certifying that services were performed according to the contract terms. The state maintains the right to suspend the contract at any time for any reason upon written notice.

Department of Budget & Finance

POSTED

DEADLINE

Website Integration and Hosting ServicesThis subcontract for Website Integration and Hosting Services, managed by DAS Procurement for the state of Connecticut, focuses on integrating communications platforms with the web presences of East Hartford Public Schools. The selected prime contractor will be responsible for configuring embedded widgets and redirects for SchoolMessenger or PowerSchool Presence, ensuring all interfaces are mobile-responsive and properly hosted. A critical requirement of the project is strict adherence to ADA and WCAG 2.1 accessibility standards to ensure an inclusive user experience. The ultimate goal is to deliver a seamless web interface that connects the district website to its communication platforms. Interested parties must respond by December 10, 2026.

POSTED

DEADLINE

System Network Integration and Technical SupportThis subcontract for System Network Integration and Technical Support involves the supply and configuration of network controllers and hardware for prime contractors working on California Department of General Services facility projects. The scope of work includes the installation of Jenesys 4G LTE controllers, Netgear switches, RIB power supplies, and Lenovo i-7 tablets to deliver a fully configured network system. The project requires strict adherence to multiple technical and security standards, including ISO 35.110, IEEE 802.3, ANSI/TIA-568, NIST SP 800-53A Moderate, and CA State Administrative Manual Section 5300. This opportunity falls under NAICS code 541512, with a response deadline set for December 10, 2026.

California Department of General Services

POSTED

DEADLINE

Integrated Roadway Management Platform

Solicitation # 2128-RFP

The City of Rock Hill, South Carolina, is soliciting proposals for a single, fully integrated roadway management platform to oversee approximately 205 centerline miles of roadway. The required system must integrate roadway imagery, pavement and asset assessment, maintenance and capital planning, and work order management into a common map and database. Key technical requirements include AI-powered distress condition scoring, automated detection of assets such as manholes and traffic signs, and the ability to collect data using ordinary vehicles via smartphones. The platform must also support remaining-service-life analysis, budget forecasting, and the direct generation of work orders from AI-detected defects or citizen reports. The contract will be awarded to the highest-scoring proposal based on a weighted evaluation system, with the heaviest weight placed on AI technology and pavement evaluation capabilities (30%), followed by company experience (20%), software functionality (20%), price (20%), and implementation and support (10%). Proposals must be submitted electronically via the e-Procurement Portal by December 10, 2026. The resulting agreement will feature monthly invoicing with a 30-day payment term, and the City reserves the right to hold up to 10% retainage until all deliverables are satisfactory. Vendors must maintain liability and workers' compensation insurance and certify compliance with various employment laws, including the South Carolina Code of Laws regarding unauthorized aliens.

POSTED

DEADLINE

AI Program Manager / Artificial Intelligence EngineerThis subcontract opportunity is for an AI Program Manager and Artificial Intelligence Engineer to support prime contractors on projects for the Massachusetts Executive Office of Public Safety and Security. The selected provider will be responsible for high-level program management and technical engineering for AI initiatives, overseeing the entire program lifecycle and providing specialized technical expertise to fulfill the statement of work. The contract is categorized under NAICS code 541512 and requires qualifications for ITS87 Category 1 for information technology contractors. Performance will take place in Boston, Massachusetts. Interested parties must respond by November 24, 2026.

Executive Office of Public Safety & Security

POSTED

DEADLINE

FY27_EOPSS_ITS87_Artificial Intelligence Engineer

Solicitation # BD-27-1044-EPS17-OTIS-135351

The Executive Office of Public Safety and Security (EOPSS) is seeking a Cloud AI Engineer to support the enhancement and management of a system-wide criminal justice data platform. This role is focused on accelerating AI adoption and implementing enterprise-scale solutions to integrate data from courts, police departments, and custodial institutions. The engineer will be responsible for architecting retrieval-augmented generation (RAG) solutions using vector databases and embedding models, integrating Model Context Protocol (MCP) servers, and managing AWS infrastructure using Terraform and CloudFormation. Key security requirements include implementing AWS IAM and Snowflake Role-Based Access Control (RBAC). The engagement is a full-time position of 37.5 hours per week, running through June 30, 2027, with a maximum all-inclusive hourly vendor bill rate of $125. Candidates must possess at least 10 years of experience in AWS cloud and data solutions. While the primary location is Milford, Massachusetts, there is a preference for candidates residing in Massachusetts or those able to travel to Milford, Boston, or Middleborough. Selected candidates must complete CORI and DCJIS fingerprinting requirements in Chelsea, Massachusetts. This procurement is eligible for the Small Business Purchasing Program, and vendors may submit a maximum of eight resumes via the COMMBUYS portal.

Executive Office of Public Safety & Security

POSTED

DEADLINE

Application Control & Zero Trust ImplementationThe Application Control and Zero Trust Implementation subcontract, issued by the Massachusetts Technology Collaborative, focuses on enhancing the security posture of prime contractors working on MassTech Rural Health Facility projects. The primary objective is to reduce the attack surface by implementing a managed application control environment utilizing the ThreatLocker technology stack. This initiative adheres to Zero Trust Architecture standards to regulate authorized applications, contain unauthorized software, and prevent lateral movement within the network. The project is categorized under NAICS code 541512 and will be performed in Westborough, Massachusetts. Interested parties can find further details through the provided COMMBUYS link, with a response deadline set for November 5, 2035.

Massachusetts Technology Collaborative

POSTED

DEADLINE

Healthcare Cybersecurity AssessmentsThe Healthcare Cybersecurity Assessments subcontract, issued by the Massachusetts Technology Collaborative, involves performing technical testing and evaluation of cybersecurity defenses for prime contractors working on MassTech Rural Health Facility projects. The scope of work includes assessing key defense mechanisms against industry-standard cybersecurity frameworks, specifically tailored to healthcare delivery environments, to ensure full compliance with the HIPAA Security Rule. The selected provider will be responsible for delivering detailed assessment reports and findings to validate the security posture of the targeted systems. This engagement is categorized under NAICS code 541512 and is based in Westborough, Massachusetts. The contract remains open for responses until November 5, 2035.

Massachusetts Technology Collaborative

POSTED

DEADLINE

2027-Cyber-01 Notice of Funding Opportunity for Rural Health Cybersecurity Grant Program

Solicitation # BD-27-1367-1367C-1367L-135350

The Massachusetts Technology Collaborative (MassTech) is issuing Notice of Funding Opportunity (NOFO) No. 2027-Cyber-01 to provide grants to eligible Rural Health Facilities (RHFs) in Massachusetts. Funded by the Centers for Medicare & Medicaid Services (CMS) under the Rural Health Transformation Program, this initiative aims to enhance cybersecurity through services provided by CyberTrust Massachusetts. The scope of work includes technical cybersecurity assessments against healthcare-specific frameworks and the implementation of ThreatLocker for application control. The total financial assistance award is $162,005,238.13, with a specific program track ceiling for Rural Health Cybersecurity of $9,725,625.00 for Years 1-3. Applicants must provide a brief organizational overview, a W-9, and a signed acceptance form, along with a scope of work from CyberTrust Massachusetts and a brief description of how the services will mature their cybersecurity program. Selected subrecipients are required to submit quarterly and annual reports to CMS and must comply with 2 CFR Part 200 Subpart F for audit purposes. The program emphasizes adherence to the HIPAA Security Rule and requires that all participants maintain a lack of debarment status from state and federal governments. MassTech and other state oversight agencies reserve the right to audit real-time financial tracking dashboards and verify that all expenditures are allowable, reasonable, and necessary.

Massachusetts Technology Collaborative

POSTED

DEADLINE

Virtual Infrastructure and Cloud Compliance ServicesThe Virtual Infrastructure and Cloud Compliance Services subcontract focuses on the design of virtual systems and the maintenance of cloud environments for prime contractors working on Department of Information Resources projects in Texas. The scope of work involves creating virtual system infrastructure designs and ensuring that all cloud environments strictly adhere to ISO and NIST compliance frameworks. Key deliverables for this engagement include detailed infrastructure design documents and comprehensive compliance reports. This opportunity is categorized under NAICS code 541512 and was posted on November 10, 2026. Interested parties must submit their responses by the deadline of February 10, 2027. Further details regarding this solicitation can be accessed through the Texas SmartBuy portal.

Department of Information Resources

POSTED

DEADLINE

Vulnerability and Asset Management ServicesThe Vulnerability and Asset Management Services subcontract focuses on the identification and management of hardware and software vulnerabilities and assets for prime contractors working on Texas Department of Information Resources projects. The scope of work includes managing security vulnerabilities, hardware and software configurations, network mapping, and event logging to ensure robust system security. Key deliverables for this engagement include the provision of detailed vulnerability reports and comprehensive asset inventories. This opportunity is categorized under NAICS code 541512 and was posted on November 10, 2026. Interested parties must submit their responses by the deadline of February 10, 2027. Further details regarding this solicitation can be accessed through the Texas SmartBuy portal.

Department of Information Resources

POSTED

about 12 hours ago

DEADLINE

in 3 months

AI Contract Overview

The Security and Compliance Implementation subcontract, issued by the Canada Revenue Agency for the Government of Canada, focuses on enhancing technical security measures to meet strict national standards. The scope of work involves the implementation of FIPS-compliant encryption, TLS 1.2 or higher, comprehensive audit logging, and the establishment of secure communication protocols. This project will be performed within the National Capital Region of Canada under NAICS code 541512. The opportunity was posted on February 4, 2026, and requires responses to be submitted by the deadline of March 6, 2026.

General Info

CRA subcontract for technical security and compliance implementation in Canada's National Capital Region.

Agency

Government of Canada → Canada Revenue Agency

NAICS

541512 - Computer Systems Design Services

Place of Performance

National Capital Region (NCR), CAN

Set-Aside

NONE

Documents

This scope was carved out of 1000540031.

The full solicitation package (6 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Artifacts Management Software

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedFeb 4

subcontract

Response DeadlineMar 6

Deadline has passed

Submission Closed

03/06/2026, 07:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyGovernment of Canada → Canada Revenue Agency

ContactsNo contacts available

OfficeN/A

Organization / AgencyGovernment of Canada → Canada Revenue Agency

Office AddressN/A

ContactsNo contact information available

Full Description

Implementation of FIPS-compliant encryption, TLS 1.2+, audit logging, and secure communication protocols in compliance with Canadian government standards.