CMMC Level 2 Compliance Support

The contract supports CMMC Level 2 self-assessment and the implementation of NIST SP 800-171 controls for systems handling Covered Defense Information, ensuring compliance with Department of Defense cybersecurity requirements. The work involves evaluating existing security posture against CMMC Level 2 standards, identifying gaps, and executing remediation measures to align with NIST controls designed to protect sensitive unclassified information within defense supply chains. This effort is critical for maintaining authorization to process, store, or transmit CDI and must be completed in alignment with federal cybersecurity frameworks. The contract is categorized as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services. It is tied to the Jacksonville location with a performance address of 32212-0103 and is issued under the Department of Defense through Jacksonville Bldg. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026. No set-aside criteria are specified, and the contract is accessible via the DIBBS portal for interested parties to review requirements and submit proposals.