CMMC Compliance and System Security Planning

This contract involves the development of a comprehensive System Security Plan (SSP) and the execution of a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment. The work requires alignment with the NIST SP 800-171 Rev 1 controls to ensure that the security practices meet the required federal standards for protecting controlled unclassified information. Upon completion of the assessment, the results must be submitted to the Supplier Performance Risk System (SPRS) for official documentation and compliance verification. The contract is categorized as a subcontract under the NAICS code 541512, which relates to computer systems design services, and is issued by the Department of Defense's ASC Supplier Operations OEM Division. Key dates include the posting date of May 10, 2026, and a response deadline by May 18, 2026. Specific location details for the place of performance and points of contact are not provided, but the contract is publicly accessible through the Defense Industrial Base database, facilitating transparency and access for interested subcontractors aiming to fulfill compliance requirements in the defense supply chain.