RFPOPEN
Save

University of Arkansas - Cybersecurity Maturity Model Certification (CMMC) Program Services - 09112026

University Of Arkansas logoUniversity Of Arkansas
Due
Oct 30, 2026
10 days left
Posted
Sep 11, 2026
Contract term
2 years
Primary contact
Geoff Hulse
10 days left to submitDue Oct 30

Know who University Of Arkansas buys from before you write a word.

Every vendor contract, renewal date and decision maker at this agency, in one place.

61 vendor contracts58 vendors
See who you're up against

Set up in 30 seconds · No credit card

THE 30-SECOND BRIEF

What they're buying

The University of Arkansas seeks proposals from qualified firms to provide cybersecurity advisory, architecture, engineering, compliance, and operational planning services to support the maturation of the university's Cybersecurity Maturity Model Certification (CMMC) Program. The engagement aims to accelerate the implementation of scalable cybersecurity capabilities, operational controls, monitoring solutions, and technical compliance frameworks to achieve and maintain compliance with CMMC Levels 1, 2, and 3 requirements. The resulting term contract is for two fiscal years with the option to renew for two additional years. Proposals are due by October 30, 2026, at 2:30 PM CST. Evaluation will be based on a complete technical proposal, respondent qualifications, and cost.

How it's scored

Complete/Thorough Technical Proposal (40 Points), Respondent Qualification (30 Points), Cost (30 Points)

SUMMARY

The University of Arkansas seeks proposals from qualified firms to provide cybersecurity advisory, architecture, engineering, compliance, and operational planning services to support the maturation of the university's Cybersecurity Maturity Model Certification (CMMC) Program.

The engagement aims to accelerate the implementation of scalable cybersecurity capabilities, operational controls, monitoring solutions, and technical compliance frameworks to achieve and maintain compliance with CMMC Levels 1, 2, and 3 requirements. The resulting term contract is for two fiscal years with the option to renew for two additional years. Proposals are due by October 30, 2026, at 2:30 PM CST. Evaluation will be based on a complete technical proposal, respondent qualifications, and cost.

EVALUATION CRITERIA

Complete/Thorough Technical Proposal40 pts
Respondent Qualification30 pts
Cost30 pts

REQUIRED ATTACHMENTS

4
  • Official Bid Price Sheet
  • Contract and Grant Disclosure and Certification Form
  • Bidder Conflict of Interest Form
  • Proof of Insurance

REQUIRED STAFFING

5
Security Control Implementation SupportSecurity Engineering SupportCompliance Analyst SupportSecurity Architect SupportProject Manager Support
Submit to
https://hogbid.uark.edu
Duration
48 months
Scope location
Fayetteville, AR
Reported agency
University of Arkansas

Other solicitations from University Of Arkansas.

Questions about this RFP

How do I respond to this RFP from University Of Arkansas?

Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The submission deadline is October 30, 2026. Be sure to include all required attachments as outlined in the solicitation. Submissions should be delivered to: https://hogbid.uark.edu. For questions, contact Geoff Hulse.

Can small businesses or minority-owned firms bid on this RFP?

Most government agencies, including University Of Arkansas in AR, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.

What happens after the RFP submission deadline?

After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.

Can I ask questions about this solicitation before submitting?

Yes, most solicitations allow vendors to submit questions during a designated period. The primary contact is Geoff Hulse. Questions and answers are typically shared with all prospective bidders.

What staffing is required for this project?

This solicitation outlines specific staffing requirements. The required roles include: Security Control Implementation Support, Security Engineering Support, Compliance Analyst Support, Security Architect Support, Project Manager Support. Proposers should demonstrate relevant qualifications and experience for each required role.

Show 6 more questions

What are the evaluation criteria for this solicitation?

This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Complete/Thorough Technical Proposal (40 Points), Respondent Qualification (30 Points), Cost (30 Points)" Vendors should carefully align their proposals with each criterion to maximize their score.

Where can I find more RFPs from University Of Arkansas?

All active and historical solicitations from University Of Arkansas are tracked and searchable. As a higher ed agency, University Of Arkansas regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.

What is the contract term for this solicitation?

The anticipated contract term is 2 years. Contract terms may include renewal options.

Is this solicitation still open for submissions?

Based on the posted deadline of October 30, 2026, this solicitation appears to still be accepting submissions. Deadlines may change through amendments or addenda, so always verify the current status directly with the issuing agency before preparing your response.

What documents are required to bid on this RFP?

Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. This solicitation specifically requires the following attachments: Official Bid Price Sheet, Contract and Grant Disclosure and Certification Form, Bidder Conflict of Interest Form, Proof of Insurance. Additionally, proposals should address staffing requirements as outlined in the solicitation. Review the full document from University Of Arkansas for the complete list.

What is the scope of this project?

This solicitation defines a specific project scope. The scope covers the following locations: Fayetteville, AR. Review the full solicitation for detailed scope requirements.

Work in government? Get Civic IQ free →
Browse all agencies in AR →

Bring us your territory.
We'll show you what is forming.

B2G and SLED sales intelligence. Surface government procurement signals from 100,000+ state, local, and education agencies months before the RFP.

Try Civic IQ for free