University Of Central Arkansas Uark #RFP09112026

University of Arkansas Fayetteville seeks CMMC Program Services for Cybersecurity Compliance

The University of Arkansas Fayetteville is seeking proposals for comprehensive Cybersecurity Maturity Model Certification (CMMC) Program Services to support compliance with CMMC Levels 1, 2, and 3. - Government Buyer: - University of Arkansas Fayetteville (UAF), Office of Business Affairs - Scope of Services: - Establish and sustain a scalable CMMC program - Develop efficient and sustainable compliance processes - Implement cybersecurity controls and monitoring frameworks - Provide advisory, architecture, engineering, compliance, continuous monitoring, automation, assessment readiness, and knowledge transfer services - Key Service Line Items: - Discovery and Current-State Assessment (documentation review, stakeholder interviews) - CMMC Compliance Maturity Assessment (roadmap development) - Cybersecurity Architecture Design (enclave, IAM, segmentation) - Governance and Operating Model (risk and compliance framework) - Continuous Monitoring Program (metrics, dashboards, reporting) - Compliance Automation Strategy (automation and tooling recommendations) - Assessment Readiness Support (mock assessments) - Knowledge Transfer and Training (workshops, SOPs, training materials) - Security Control Implementation, Security Engineering, Compliance Analyst, Security Architect, Project Manager, Mock Assessment Facilitation, Additional Training Sessions - Notable Requirements: - Compliance with Arkansas Code Annotated 19-11-249 - Contract may be used by other University of Arkansas System campuses or state public procurement units via participating addendum - Pricing must be detailed per service and remain firm for two years - Respondents may bid on all or specific services; awards may be split among multiple vendors - No specific OEMs or product part numbers are mentioned; focus is on professional services - Contract Duration: - Two fiscal years, with an option to renew for two additional years (up to four years total) - Estimated Contract Value: - Based on scope and industry standards, likely in the range of $250,000 to $1,000,000 - Potential Competitors: - Leading cybersecurity consulting firms with CMMC expertise (e.g., Deloitte, KPMG, Booz Allen Hamilton, Leidos, Accenture) - Unique/Notable Requirements: - Emphasis on scalable, sustainable compliance and continuous improvement - Knowledge transfer and training for internal staff - Participation option for other state entities

Description

The University of Arkansas, Fayetteville (UAF) is soliciting proposals for Cybersecurity Maturity Model Certification (CMMC) Program Services. The RFP seeks qualified respondents to provide services supporting compliance with CMMC Levels 1, 2, and 3, protecting Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The contract term is two fiscal years with an option to renew for two additional years. The goal is to establish a scalable CMMC program that reduces administrative burden and improves risk management through continuous compliance visibility.

View original listing