Cybersecurity & CUI Compliance Support

The contract seeks support for achieving and maintaining compliance with DFARS 252.204-7012, focusing on the protection of Covered Defense Information through implementation of security controls aligned with NIST SP 800-171. This includes establishing safeguards to prevent unauthorized access or disclosure of sensitive data, developing and maintaining incident response procedures, and ensuring timely reporting of cybersecurity incidents involving Covered Defense Information. The contractor must also conduct a self-assessment to demonstrate readiness for CMMC Level 2 certification, documenting adherence to all required practices and processes outlined in the framework. This is a small business set-aside subcontract under the NAICS code 541512, issued by the Department of Defense’s Strategic Acquisitions Program Directorate, with a response deadline of August 14, 2026. The work is expected to be performed in support of federal defense contract obligations and requires proven expertise in cybersecurity compliance within the defense industrial base. All activities must be carried out in accordance with federal acquisition regulations and the specific requirements of DFARS and CMMC to ensure continued eligibility for defense-related contracts and funding.