CMMC Level 2 Compliance Implementation & Assessment

The contract requires the implementation and validation of comprehensive cybersecurity controls to meet CMMC Level 2 and NIST SP 800-171 standards, ensuring the protection of covered defense information. Key responsibilities include system hardening, enforcement of strict access control measures, and the development and verification of incident response plans to detect, respond to, and recover from cyber threats. The work must be performed at the specified location in Texarkana, Texas, with all controls documented and tested to demonstrate compliance across technical, operational, and managerial domains. This subcontract is issued under NAICS code 541512 and is managed by the Department of Defense’s Active Devices Division. Proposals must be submitted by August 20, 2026, following the posting date of August 9, 2026. While the solicitation number and point of contact are not provided in the data, interested parties can access full details through the DIBBS portal using the provided link. Compliance with all CMMC and NIST requirements is mandatory, and successful implementation will be subject to formal assessment to validate adherence to federal cybersecurity standards for defense contractors.