CMMC Level 2 Cybersecurity Assessment & Compliance Support

The contract calls for comprehensive CMMC Level 2 cybersecurity readiness services to ensure compliance with DFARS 252.204-7012 requirements, focusing on a full spectrum of support including a detailed gap assessment, development and implementation of required cybersecurity policies, system hardening to meet NIST SP 800-171 controls, and coordination with a Certified Third-Party Assessment Organization to facilitate official evaluation. All deliverables are oriented toward achieving and maintaining CMMC Level 2 certification, with an emphasis on securing controlled unclassified information within the contractor’s environment. The contract is a small business set-aside under the SBA’s Total Small Business Set-Aside program and falls under NAICS code 541512 for computer systems design services. Performance is required at Hill AFB, Utah, with a response deadline of August 17, 2026. It is structured as a subcontract and issued by the Department of Defense’s Fluid Handling Division, with the procurement active and available through the DIBBS platform. The work demands expertise in federal cybersecurity frameworks and direct engagement with DoD compliance protocols, positioning the selected vendor as a critical enabler of defense supply chain security.