Cybersecurity and CUI Safeguarding Services (CMMC Support)

The contract requires implementation of NIST SP 800-171 security controls to protect controlled unclassified information, with the goal of achieving and maintaining CMMC Level 2 certification. This includes conducting regular self-assessments to evaluate compliance posture, identifying gaps, and executing corrective actions to meet the required maturity levels. The contractor must establish and maintain processes for cyber incident reporting in alignment with federal requirements, ensuring timely detection, response, and notification of security events. All activities are focused on safeguarding sensitive government data within a DoD-contracted environment. The services are part of a subcontract under the Department of Defense’s ASC Commodities Division, with performance expected to align with the NAICS code 541512 for computer systems design services. The solicitation opened on April 28, 2026, with responses due by May 8, 2026. The place of performance and point of contact details are not specified, but the work is tied directly to compliance with federal cybersecurity frameworks and must be executed to support ongoing DoD contractual obligations.