CMMC Level 2 Compliance & Cybersecurity Support

This contract provides comprehensive cybersecurity support to subcontractors managing controlled unencrypted information under the Cybersecurity Maturity Model Certification Level 2 framework. The scope includes guidance and assistance with self-assessments required for CMMC Level 2 compliance, registration and maintenance of Security Requirements and Performance Summary responses in the Supplier Performance Risk System, and the development, organization, and documentation of cybersecurity policies and procedures aligned with NIST SP 800-171 standards. The support is designed to ensure subcontractors meet Department of Defense requirements for safeguarding controlled unclassified information throughout the supply chain. The contract is classified as a subcontract under NAICS code 541512, issued by the Naval Air Warfare Center under the Department of Defense, with a response deadline of August 13, 2026. It targets entities engaged in high-tech or defense-related subcontracting roles that handle sensitive government data and require structured, audit-ready compliance measures. While specific performance locations and point of contact information are not provided, the work is expected to be conducted remotely or at the subcontractor's facility, with deliverables focused entirely on documentation, process alignment, and system readiness to pass CMMC evaluations.