Cybersecurity and CUI Safeguarding Support

This contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance and implementing the NIST SP 800-171 controls necessary to safeguard Controlled Unclassified Information. The work involves assisting the contractor in conducting a self-assessment against CMMC Level 2 requirements and executing the full suite of NIST 800-171 security controls to ensure proper protection of sensitive federal data. The effort is focused on building and documenting a compliant cybersecurity posture tailored to the requirements of the Department of Defense. Performance will occur at Robins AFB, Georgia, with all work centered on preparing the organization for certification and maintaining continuous compliance. The contract is structured as a subcontract under a Total Small Business Set-Aside, meaning only small business concerns can compete, as defined by the SBA. It falls under NAICS code 541512, which covers computer systems design and related services, indicating that technical expertise in cybersecurity framework implementation is required. The solicitation was posted on July 23, 2026, with a response deadline of August 3, 2026. While no specific point of contact is listed, participation is facilitated through the DIBBS portal. The goal is to enable the contractor to meet DoD cybersecurity standards for handling Controlled Unclassified Information without reliance on third-party audits, emphasizing internal readiness and documentation.