CMMC Level 2 Cybersecurity Compliance and SPRS Submission

The contract requires the performance of a CMMC Level 2 self-assessment to validate adherence to NIST SP 800-171 cybersecurity controls, ensuring the organization meets Department of Defense requirements for protecting controlled unclassified information. The scope includes evaluating current security practices against the specified framework, identifying gaps, implementing necessary remediations, and formally submitting the assessment results to the Supplier Performance Risk System for DoD accreditation. This effort is critical for maintaining eligibility to contract with the Department of Defense and supporting sensitive government programs. The contract is structured as a subcontract under the NAICS code 541611, tied to the Strategic Acquisition Program Directorate, with a response deadline of August 12, 2026, and a posting date of July 28, 2026. There is no set-aside designation specified, and the place of performance is not delineated, indicating the work may be performed remotely or at the contractor’s location. The submission of accurate and complete SPRS documentation is mandatory, and failure to meet compliance standards or deadlines may result in disqualification from future DoD contracting opportunities.