CMMC Level 2 Compliance Support

This contract supports the self-assessment and full implementation of NIST SP 800-171 security safeguards on covered contractor information systems to achieve CMMC Level 2 compliance as required by DFARS 252.204-7016. The work focuses on enabling contractors to meet the Department of Defense’s cybersecurity standards through structured guidance, documentation, and technical support tailored to the specific controls outlined in NIST 800-171. The effort is designed to ensure systems handling controlled unclassified information are properly secured, auditable, and aligned with federal mandates for defense contractors. The contract is structured as a subcontract under the ASC Commodities Division of the Department of Defense, with performance required at Hill Air Force Base, Utah, ZIP code 84056-5734. It is classified under NAICS code 541512, indicating it pertains to computer systems design services. The solicitation was posted on July 30, 2026, with responses due by August 7, 2026, and is accessible through the DIBBS platform. While no set-aside criteria or point of contact are specified, the scope demands expertise in cybersecurity frameworks, compliance methodology, and experience implementing NIST controls within defense contractor environments.