CMMC Level 1 Compliance Support for Subcontractors

The contract seeks cybersecurity consulting and support services to assist subcontractors in achieving CMMC Level 1 compliance and completing SPRS registration, targeting small businesses under a total small business set-aside. The effort is centered on enabling subcontractors within the Department of Defense supply chain to meet foundational cybersecurity requirements as mandated by the Cybersecurity Maturity Model Certification program, with a focus on implementing basic safeguarding practices for federal contract information. The work is to be performed at Wright-Patterson Air Force Base and falls under NAICS code 541512 for computer systems design services. Submission of proposals is due by May 20, 2026, and the opportunity is posted under the Defense Department’s FA8601 Aflcmc Pzio office. The scope involves providing expert guidance, documentation support, and implementation assistance to help subcontractors navigate the compliance framework, ensuring alignment with NIST SP 800-171 requirements and timely registration in the Supplier Performance Risk System. The contract is structured to enable small businesses to fulfill their obligations as subcontractors to prime contractors handling sensitive DoD information, promoting a more secure and compliant defense industrial base.