Cybersecurity & Compliance (STIGs, CMMC, NISPOM)

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with Department of Defense Security Technical Implementation Guides, Cybersecurity Maturity Model Certification, and the National Industrial Security Program Operating Manual, specifically for systems processing Controlled Unclassified Information and Federal Contract Information. Compliance must be achieved through the use of ACAS and Microsoft Defender for Endpoint for continuous monitoring, vulnerability management, and threat detection. The work is structured as a total small business set-aside under FAR 19.5, targeting small businesses qualified under NAICS code 541513 for other computer-related services. Performance is tied to support for the Naval Research Laboratory under the Department of Defense, with all activities expected to meet rigorous federal standards for information assurance and data protection. Proposals must be submitted by the deadline of July 31, 2026, and the contract type is a subcontract, indicating it will be part of a larger prime contractual arrangement.