When is the submission deadline?

Submissions are due October 16, 2026. Questions must be submitted by September 25, 2026.

It was issued by University Of Arkansas. The work is located in Fayetteville, Arkansas, United States.

Who is a good fit for this opportunity?

Cybersecurity consultancy with Cybersecurity Maturity Model Certification program expertise. Experience in cybersecurity architecture, engineering, compliance, and operational planning. Proven ability to design scalable control environments for research programs and protected enclaves. Expertise in continuous monitoring, security operations, compliance automation, and assessment readiness. Experience supporting government agencies and long-term cybersecurity program sustainment.

Cybersecurity Maturity Model Certification Program Services (Due October 16, 2026)

Overview

Cybersecurity & Data Privacy

Fayetteville, Arkansas, United StatesPosted: September 12, 2026Deadline: October 16, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

A Fayetteville, Arkansas government authority seeks cybersecurity expertise to mature and sustain its Cybersecurity Maturity Model Certification program. The two-year engagement includes control architecture, compliance planning, continuous monitoring, security operations, and assessment readiness.

KEY REQUIREMENTS

Must have experience establishing sustainable cybersecurity operating models and continuous monitoring programs
Must have experience with CMMC Level 1, 2, and 3 requirements within complex organizations
Must provide a minimum of three references in higher education located in the continental United States
Must be able to provide a Voluntary Product Accessibility Template (VPAT) for technology products
Must maintain specific insurance coverage including Workers Compensation, Comprehensive General Liability, and Comprehensive Automobile Liability
Must perform criminal background checks on all employees performing on-campus duties
Must be a licensed business authorized to transact business in Arkansas
Must certify non-boycott of Israel, energy, fossil fuel, firearms, and ammunition industries
Must certify that the company is not a scrutinized company owned by the People's Republic of China

CONTRACT DURATION

48 months

TIMELINE

September 11th, 2026: RFP released to prospective respondents

September 25th, 2026: Last date/time UA will accept questions

October 5th, 2026: Last date UA will issue an addendum

October 16th, 2026: Proposal Submission Deadline and Bid Opening Event at 2:30 PM CST

QUESTION DEADLINE

September 25, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

University Of Arkansas

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

The government authority in Fayetteville, Arkansas, seeks a vendor to provide cybersecurity maturity model certification program services over a two-year contract period. The selected provider will deliver cybersecurity advisory, architecture, engineering, compliance, and operational planning services to support the maturation of the agency’s certification program.

The vendor will work collaboratively with agency stakeholders to design and operationalize cybersecurity capabilities that support ongoing compliance, assessment readiness, continuous monitoring, and long-term program sustainability. Responsibilities include developing a scalable cybersecurity control architecture and operating model capable of supporting multiple research programs, protected enclaves, departments, and future compliance requirements.

Services will also address continuous monitoring and security operations, compliance automation and scalability, and assessment readiness and sustainment.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due October 16, 2026. Questions must be submitted by September 25, 2026.
Who issued this RFP?: It was issued by University Of Arkansas. The work is located in Fayetteville, Arkansas, United States.
Who is a good fit for this opportunity?: Cybersecurity consultancy with Cybersecurity Maturity Model Certification program expertise
Experience in cybersecurity architecture, engineering, compliance, and operational planning
Proven ability to design scalable control environments for research programs and protected enclaves
Expertise in continuous monitoring, security operations, compliance automation, and assessment readiness
Experience supporting government agencies and long-term cybersecurity program sustainment

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works