Cybersecurity and CUI Safeguarding (CMMC Level 2 Support)

The contract requires implementation of NIST SP 800-171 controls to protect covered defense information, encompassing the development of cybersecurity policies, comprehensive system assessments, and established procedures for cyber incident reporting. This effort is aligned with CMMC Level 2 requirements, ensuring that the contractor meets federal standards for safeguarding controlled unclassified information within defense systems. The work involves not only technical implementation but also operational readiness to detect, respond to, and report cybersecurity events in compliance with Department of Defense mandates. The contract is a subcontract under a Women-Owned Small Business Set-Aside, designated under NAICS code 541512 for computer systems design services. It is issued by the Department of Defense through ASC SUPPLIER OPER AE AND AF DIV, with performance required at Robins Air Force Base, Georgia, zip code 31098-1887. The solicitation was posted on July 16, 2026, and responses are due by July 24, 2026, indicating a short turnaround for qualified eligible vendors to submit proposals. Success in this effort will ensure the contractor supports the DoD’s broader mission of securing sensitive information across its supply chain.