CMMC Level 2 Cybersecurity Compliance Support

This contract requires the implementation and comprehensive documentation of NIST SP 800-171 security controls to achieve CMMC Level 2 certification for handling Controlled Unclassified Information. The work is focused on aligning cybersecurity practices with federal standards to ensure the protection of sensitive data within a Department of Defense environment. The contractor must deliver full compliance through validated policies, procedures, system configurations, and audit-ready documentation that demonstrates adherence to all required controls across 110 security requirements outlined in NIST SP 800-171. The performance location is Robins Air Force Base, Georgia, with a 2026 deadline for submissions and a response window ending on July 29, 2026. This is a subcontract opportunity under NAICS code 541512 for Computer Systems Design Services, solicited by the ASC SUPPLIER OPER OEM DIVISION. The effort demands specialized expertise in cybersecurity compliance frameworks, experience with CMMC requirements, and the ability to integrate controls into existing IT infrastructure without disrupting operational capabilities. All deliverables must support an independent assessment and readiness for CMMC Level 2 certification, ensuring the protected CUI remains secure throughout its lifecycle.