CMMC Documentation and Policy Development

The contract requires the development and maintenance of comprehensive cybersecurity policies, procedures, and Standard Operating Procedures (SOPs) that fully align with the Cybersecurity Maturity Model Certification (CMMC) framework and NIST Special Publication 800-171 standards. The work entails creating foundational documentation to ensure compliance with federal cybersecurity requirements and includes annual updates or revisions as necessary to reflect changes in control requirements, regulatory updates, or operational shifts. All deliverables must be current, accurate, and capable of supporting auditable proof of compliance for the Department of Defense. This subcontract is issued under the NAICS code 541618 and is performance-based at Crane, Indiana, with a response deadline of May 12, 2026. The work supports the Naval Surface Warfare Center, Crane Division, and is part of broader efforts to strengthen cybersecurity readiness across defense supply chains. While no specific set-aside designation is indicated, the contract is structured as a subcontract and is tied to a federal agency's obligation to maintain stringent information assurance practices under CMMC. Continuous adherence to evolving standards and proactive documentation management are critical to meeting contractual obligations.