CMMC and NIST SP 800-171 Compliance Support

This subcontract opportunity with the U.S. Air Force focuses on providing cybersecurity auditing and implementation services for prime contractors engaged in SBIR projects. The primary objective is to ensure compliance with NIST SP 800-171 and prepare organizations for CMMC certification. Key responsibilities include conducting gap analyses, implementing necessary security controls within development environments, and producing critical compliance documentation such as the System Security Plan and the Plan of Action and Milestones. The project is designated as a Total Small Business Set-Aside under NAICS code 541519, specifically targeting firms with fewer than 500 employees to meet SBIR/STTR mandates. Interested parties must submit their responses by November 25, 2026. The ultimate goal of the engagement is to deliver a fully documented and compliant security posture that meets Department of Defense standards.