This Solicitation opportunity from Government of Canada was posted on February 27, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Software Composition Analysis (SCA) and software supply chain security solution

Closed

PRCP0003403International

Submission Closed02/27/2026, 03:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Investment Management Software and Product Support Services

Solicitation # 27-001

The Employees' Trust Funds of Hawaii, under the Department of Budget and Finance, is soliciting quotes for investment management software and accompanying product support services via RFQ No. 27-001. The requested software must be capable of utilizing artificial intelligence to enhance workflows and analyze data while strictly maintaining confidentiality. Performance will take place in Oahu, Hawaii, and the successful vendor must adhere to professional quality standards and accreditation generally accepted in the field. Contractors must demonstrate strict compliance with various Hawaii Revised Statutes, including the General Excise Tax Law, Employment Security Law, Temporary Disability Insurance, and the Prepaid Health Care Act. Required certifications include a tax clearance certificate from the State of Hawaii and the IRS, a general excise tax license, and a certificate of compliance from the Department of Labor and Industrial Relations. Payments are processed upon the submission of original invoices certifying that services were performed according to the contract terms. The state maintains the right to suspend the contract at any time for any reason upon written notice.

Department of Budget & Finance

POSTED

DEADLINE

MMIS and Medicaid Financial Systems Integrator

South Dakota State Government

POSTED

DEADLINE

Case Management System

Solicitation # 26RFI21526

The South Dakota Department of Human Services, Developmental Disability Services, has issued Request for Information 26RFI21526 to gather information on integrated case management and service coordination systems. The objective is to replace legacy paper systems with a state-hosted, comprehensive solution to support a state-run Intermediate Care Facility and two 1915(c) Medicaid Waivers. The desired system must integrate client intake, eligibility, profile management, and service planning, specifically supporting Individual Support Plans and Person-Centered Plans. Key technical requirements include electronic medication administration records, e-prescribing, an interface with MMIS for billing and claims automation, and a centralized incident reporting portal for federal reporting. The system must adhere to strict regulatory and security standards, including CMS and CFR requirements, HIPAA/HITECH encryption for data at rest and in transit, and WCAG accessibility standards. Security features must include multi-factor authentication, single sign-on, and role-based access controls. As this is an RFI for planning purposes, it does not constitute a solicitation for bid. Interested vendors must submit their responses in PDF or Word format to Lesley Farmen by 11:59 pm CST on January 7, 2027, using the specific subject line Case Management 26RFI21526 Submission.

South Dakota State Government

POSTED

DEADLINE

Managed IT Systems Administration and Network Monitoring

Sanford Housing Authority

POSTED

DEADLINE

Enterprise SQL Server Availability SpecialistThe Enterprise SQL Server Availability Specialist subcontract involves performing backend database configuration for prime contractors working on Metropolitan Atlanta Rapid Transit Authority IT infrastructure projects. The primary objective is to implement and support Microsoft SQL Server Always on Availability Groups and SQL Server Failover Cluster Instances to ensure resilient backend support for enterprise monitoring workloads. Qualified candidates must possess a minimum of two years of experience specifically with SQL Server Always on and FCI. This opportunity was posted on November 10, 2026, with a response deadline of December 7, 2026, falling under NAICS code 541512.

Metropolitan Atlanta Rapid Transit Authority

POSTED

DEADLINE

SolarWinds SAM and HA Implementation SpecialistThis subcontract opportunity is for a SolarWinds SAM and HA Implementation Specialist to provide professional services for prime contractors supporting Metropolitan Atlanta Rapid Transit Authority IT infrastructure projects. The selected specialist will be responsible for installing, configuring, and optimizing the SolarWinds environment, with a specific focus on tuning the Server and Application Monitor module and implementing High Availability configurations to ensure a fully operational monitoring system. Qualified candidates must possess either a SolarWinds Professional Certification or a minimum of two years of enterprise-level experience. The solicitation was posted on November 10, 2026, and requires a response by December 7, 2026. This project falls under NAICS code 541512 and is centered on delivering a high-performance, resilient monitoring environment for the agency.

Metropolitan Atlanta Rapid Transit Authority

POSTED

DEADLINE

IFB B600684 ¿ I.T. Infrastructure Monitoring and Observability Platform

Solicitation # B600684

The Metropolitan Atlanta Rapid Transit Authority (MARTA) is soliciting bids under IFB B600684 for an I.T. Infrastructure Monitoring and Observability Platform. The scope of work involves professional services to deploy High Availability (HA) configurations and configure the Server and Application Monitor (SAM) module for MARTA's SolarWinds monitoring platform, alongside a three-year maintenance and support renewal. Technical requirements include the implementation of Microsoft SQL Server Always on Availability Groups or SQL Server Failover Cluster Instances (FCI). To be eligible, contractors must be an active Authorized SolarWinds Value-Added Reseller (VAR) and a SolarWinds Certified Service Partner (CSCP), with personnel holding a SolarWinds Professional Certification or two years of equivalent experience. The contract will be awarded based on price to a responsive and responsible bidder who is technically and financially qualified. Bidders must adhere to strict cybersecurity standards, including the NIST Cybersecurity Framework, NIST Risk Management Framework, and CIS 18 controls, while ensuring the confidentiality, integrity, and availability of MARTA data. Compliance with the Americans with Disabilities Act, Title VI of the Civil Rights Act, and MARTA's Code of Ethics is mandatory. All bids must be submitted electronically by December 7, 2026, and must include required documentation such as the Contractor's Affidavit, No Conflict of Interest certification, and a list of proposed subcontractors.

Metropolitan Atlanta Rapid Transit Authority

POSTED

DEADLINE

IT Infrastructure and Support ServicesThis subcontract for IT Infrastructure and Support Services involves providing technical setup and continuous IT assistance for Integrated Work and Health Hubs under the NHS Central East Integrated Care Board. The scope of work includes establishing internet connectivity, managing hardware support, and ensuring seamless systems integration while strictly adhering to NHS network security protocols and operating within secure IT environments. The primary objective is to deliver a fully functional IT infrastructure complemented by ongoing technical help desk support. Interested parties must submit their responses by December 9, 2026, to support prime contractors in the successful delivery of these essential healthcare-related technical services.

NHS Central East Integrated Care Board

POSTED

DEADLINE

Smart Parking Guidance Platform & System

Solicitation # 2027-RFP-INTECH-0029

The Georgia Institute of Technology, on behalf of the Board of Regents of the University System of Georgia, is soliciting proposals for a Smart Parking Guidance Platform and System. This project focuses on the implementation of technologies including global positioning systems for vehicle tracking, vehicle detectors, and automated vehicle identification systems. The resulting agreement will be an as-needed agency contract, meaning the university reserves the right to establish a contract for campus needs without guaranteeing specific quantities of goods to any awarded vendor. The solicitation, identified as 2027-RFP-INTECH-0029, opened on November 10, 2026, with a response deadline of December 9, 2026, at 4:00 PM UTC. Interested parties must register through the designated bidding portal to participate. Danielle Kenaston serves as the primary point of contact for this procurement. Performance of the contract will take place within the state of Georgia.

Georgia Institute of Technology

POSTED

DEADLINE

PEP Implementation Testing ServicesThe PEP Implementation Testing Services subcontract involves providing comprehensive testing for the Patient Engagement Portal on behalf of prime contractors for the Sheffield Health Partnership University NHS Foundation Trust. The scope of work includes executing User Acceptance Testing, system integration testing, and supplier testing through the use of QA environments and automated tools. A critical requirement of the engagement is strict adherence to healthcare data privacy standards to ensure the security of sensitive information. The selected provider is responsible for delivering detailed testing reports and formal UAT sign-off documentation. This opportunity was posted on November 10, 2026, with a response deadline of November 26, 2026. The project falls under NAICS code 541512 and is centered on ensuring the functional integrity and compliance of the portal before final implementation.

Sheffield Health Partnership University NHS Foundation Trust

POSTED

DEADLINE

PN365 - Patient Engagement Portal

Solicitation # C487615

The Sheffield Health Partnership University NHS Foundation Trust is seeking a single supplier to provide a Patient Engagement Portal (PEP) for patient administration. This procurement is conducted via the G-Cloud 15 framework and is noted as being particularly suitable for small and medium-sized enterprises. The system must be fully operational and in live use by March 31, 2027, with the supplier responsible for all necessary testing and training prior to this date. The estimated contract value is 300,000 GBP including VAT, with an initial performance period from January 6, 2027, to January 5, 2031, and an option to extend for an additional two years until January 5, 2033. The selection process follows a competitive flexible procedure consisting of three stages: an initial shortlist via the G-Cloud 15 Digital Platform, a formal tender submission, and a final demonstration for the top three scoring tenderers. Award decisions are based on a weighted evaluation comprising technical quality at 40%, commercial price at 30%, the demonstration at 20%, and social value at 10%. Submissions must be made in English via the Atamis portal by November 26, 2026, and the contract stipulates a 30-day payment term.

Sheffield Health Partnership University NHS Foundation Trust

POSTED

about 7 hours ago

DEADLINE

in 15 days

AI Contract Overview

The Business Development Bank of Canada (BDC) has issued a Request for Information (RFI) to assess the current market offerings for Software Composition Analysis (SCA) and software supply chain security solutions. This initiative aims to gather insights on available technologies, delivery models, and vendor capabilities that align with BDC’s goals of enhancing software supply chain security. Key focus areas include open-source component analysis, vulnerability management, license compliance, and additional features such as repository management, proxy/firewall integration, and policy enforcement. Interested parties can access bidding documents through the Merx platform, with associated fees as outlined on their pricing page. The solicitation, identified as PRCP0003403, was posted on January 27, 2026, with responses due by February 20, 2026. The contract is issued under the federal organization type and managed by the Business Development Bank of Canada within the Government of Canada. The primary contact for this solicitation is Micheline Wakim, the Contracting Authority, who can be reached via email or phone for further information.

General Info

BDC requests information on Software Composition Analysis and supply chain security solutions.

Agency

Government of Canada → Business Development Bank of Canada

NAICS

541512 - Computer Systems Design Services

Place of Performance

CAN

Set-Aside

NONE

Documents

No documents available

Documents will appear here when they are available.

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJan 27

Solicitation

Response DeadlineFeb 27

Deadline has passed

Submission Closed

02/27/2026, 03:00:00 PM UTC

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyGovernment of Canada → Business Development Bank of Canada

Contacts1 person available

OfficeN/A

Organization / AgencyGovernment of Canada → Business Development Bank of Canada

Office AddressN/A

Contacts

Micheline WakimPoint of Contact

contact@example.gov

+1 (555) 000-0000

Full Description

The purpose of this Request for Information (RFI) is to explore the current market landscape for Software Composition Analysis (SCA) and software supply chain security solutions. BDC aims to identify technologies, delivery models, and vendor capabilities that support its software supply chain security objectives, including open-source component analysis, vulnerability management, license compliance, and advanced features such as repository management, proxy/firewall integration, and policy enforcement.Bidding and Documents are available on http://www.merx.com. Fees may apply; See https://www.merx.com/public/pricing for more information.

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS