CMMC Level 2 Cybersecurity Compliance and Assessment Support

This contract seeks a small business to provide comprehensive third-party CMMC Level 2 assessment and compliance support focused on securing systems that handle Controlled Unclassified Information in alignment with NIST SP 800-171 requirements. The scope includes system hardening to meet security controls, development and organization of mandatory documentation, and preparation for a formal CMMC audit to ensure full readiness and compliance. The work is essential for enabling the prime contractor to operate within the Department of Defense’s cybersecurity framework and maintain eligibility for handling sensitive but unclassified data. All activities must be performed in direct support of operations at Tinker Air Force Base, 73145-8000. The contract is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside provisions, ensuring eligibility is restricted to firms certified as small businesses as defined by the NAICS code 541512, which covers computer systems design services. Proposals must be submitted by August 5, 2026, with the solicitation issued under the Defense Logistics Agency’s DIBBS portal. The agency responsible is the ASC Commodities Division, part of the Department of Defense, and the selected vendor will be expected to deliver certified compliance outcomes, not just advisory services, ensuring the recipient’s infrastructure withstands independent CMMC scrutiny.