CMMC Level 2 / NIST SP 800-171 Compliance Management

This subcontract opportunity, titled CMMC Level 2 / NIST SP 800-171 Compliance Management, focuses on providing cybersecurity auditing and system hardening for prime contractors supporting Defense Logistics Agency projects. The selected provider will implement security controls aligned with NIST SP 800-171 and prepare organizations for CMMC Level 2 certification. Key deliverables include the System Security Plan, Plan of Action and Milestones, and final CMMC certification, with a specific requirement to utilize secure data environments for handling Controlled Unclassified Information and ITAR/EAR data. The project is a total small business set-aside under NAICS code 541512 for the Department of Defense Aviation Supply Chain. Performance will take place in San Diego, California. Interested parties must respond by September 25, 2026.