CMMC Level 2 Cybersecurity Implementation

The contract requires the implementation and self-assessment of CMMC Level 2 cybersecurity controls to safeguard Covered Defense Information (CDI) throughout manufacturing and documentation processes, ensuring full compliance with NIST SP 800-171 standards. This effort is critical to protecting sensitive defense data and maintaining eligibility for participation in Department of Defense contracting activities, with all technical and procedural requirements tied directly to the production and record-keeping functions performed at Robins AFB, Georgia, under the 31098-1887 zip code. The solicitation is structured as a subcontract under NAICS code 541512, indicating the primary focus on computer systems design and related services supporting defense operations. Responses must be submitted by August 7, 2026, following a July 31, 2026 posting date, and the work must align with the Department of Defense’s broader cybersecurity initiatives to enforce a standardized, auditable framework across its supply chain. The place of performance is fixed at Robins AFB, and all cyber hygiene practices, documentation, and control assessments must be fully operational and demonstrable at that location to meet compliance obligations.