CMMC Level 2 and NIST SP 800-171 Compliance Support for Defense Supplier

The contract seeks advisory and implementation services to assist a defense supplier in achieving CMMC Level 2 certification and full compliance with NIST SP 800-171 standards for handling covered defense information. The services will include guidance on assessing current cybersecurity posture, identifying gaps relative to required controls, developing remediation plans, and executing implementation strategies to meet federal compliance mandates. The work is focused on enabling the supplier to accurately conduct a self-assessment and document compliance readiness in alignment with Department of Defense requirements. Performance of the contract will be conducted in San Diego, California, with an emphasis on delivering practical, actionable outcomes tailored to the supplier’s operational environment. The solicitation is structured as a subcontract under the NAICS code 541512, indicating a focus on computer systems design services. The opportunity was posted on July 23, 2026, with responses due by August 3, 2026, and is managed by the Department of Defense through the LAND SUPPLY CHAIN organizational entity. All activities must support the supplier’s ability to safeguard sensitive information and maintain eligibility for DoD contracts requiring CMMC Level 2 certification.