Cybersecurity & CMMC Compliance Support

The contract seeks support for implementing and maintaining cybersecurity controls to achieve CMMC Level 2 compliance and adherence to NIST SP 800-171 standards. This includes the full scope of preparing for and sustaining audit readiness, ensuring that all required security controls are properly documented, configured, and operational. The work demands a robust incident response plan that enables timely detection, containment, mitigation, and reporting of cybersecurity events, with an emphasis on continuous monitoring and improvement of the security posture. This subcontract is tied to the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV and falls under the NAICS code 541512 for computer systems design services. The opportunity is open for responses until August 7, 2026, and requires the contractor to deliver comprehensive, actionable cybersecurity support that aligns with federal mandates for protecting controlled unclassified information. While the place of performance and point of contact details are unspecified, the work is expected to directly support defense supply chain security objectives by ensuring that systems are resilient, compliant, and capable of withstanding evolving cyber threats.