CMMC Level 2 Cybersecurity Compliance Support

The contract supports the implementation and documentation of NIST SP 800-171 controls to achieve CMMC Level 2 compliance for the protection of controlled unclassified information. The work is focused on ensuring that systems and processes meet the required cybersecurity standards to safeguard CUI in alignment with Department of Defense expectations. This includes assessing current security postures, designing and deploying appropriate controls, maintaining comprehensive documentation, and preparing for third-party assessments required for CMMC certification. The effort is a subcontract under the Department of Defense, specifically tied to the Active Devices Division, with performance expected at Robins AFB, Georgia, 31098-1887. The solicitation falls under NAICS code 541512 for computer systems design services and was posted on July 5, 2026, with responses due by July 16, 2026. The scope requires proven expertise in NIST frameworks and CMMC requirements, with an emphasis on practical execution, audit readiness, and continuous compliance maintenance within a defense industrial base environment.