CMMC & NIST SP 800-171 Compliance Support

This contract provides third-party support to achieve and maintain CMMC Level 2 and NIST SP 800-171 compliance for safeguarding controlled technical data, with a focus on developing and refining the System Security Plan and Plan of Action and Milestones, as well as executing remediation activities to close security gaps. The work is essential for ensuring that the contractor meets federal cybersecurity requirements governing the protection of sensitive information under the Department of Defense’s regulatory framework. All deliverables must align with current NIST standards and CMMC framework controls to demonstrate continuous compliance and readiness for assessment. The contract is structured as a subcontract under a Total Small Business Set-Aside, meaning only small businesses are eligible to bid, and it falls under NAICS code 541512 for computer systems design services. The performance location is Wright-Patterson Air Force Base with a response deadline of July 31, 2026, and the solicitation was posted on July 21, 2026. The award will support the Air Force Research Laboratory’s mission to secure controlled technical data within its operational environment, requiring the selected vendor to deliver actionable, documented, and auditable cybersecurity practices tailored to the unique needs of defense contractors handling sensitive aerospace and defense information.