CMMC-Compliant Cybersecurity for Controlled Data

The contract requires the implementation of CMMC Level 2 cybersecurity safeguards to protect controlled technical data, ensuring full compliance with NIST SP 800-171 standards. This includes establishing, documenting, and enforcing a robust cybersecurity framework that addresses all required security controls, with a focus on safeguarding sensitive information from unauthorized access, disclosure, or tampering. The contractor must also prepare for and be fully ready to undergo a third-party assessment to validate CMMC Level 2 certification, demonstrating operational and procedural readiness through documented policies, employee training, and technical controls. This is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at Hill AFB, Utah, under the NAICS code 541512 for computer systems design services. The solicitation was posted on July 26, 2026, and responses are due by August 3, 2026. The contractor must deliver solutions that meet federal cybersecurity requirements without reliance on set-aside provisions, and all activities must align with DoD expectations for securing controlled unclassified data in a defense supply chain environment.