Cybersecurity and IT Compliance Support

The contract seeks support services to ensure compliance with NIST SP 800-171 requirements, readiness for CMMC Level 2 certification, and adherence to cyber incident reporting obligations under DFARS 252.204-7012 for the handling of covered defense information. This effort is critical for maintaining the security posture of controlled unclassified information within the defense supply chain and requires implementation of robust cybersecurity controls, documented policies and procedures, continuous monitoring, and timely reporting of cyber incidents as mandated by federal regulations. The work will involve assessments, gap analyses, remediation planning, staff training, and documentation development to align organizational practices with the specified standards. This subcontract is issued by the ASC Commodity Division under the Department of Defense and is classified under NAICS code 541512 for computer systems design services. Responses must be submitted by August 10, 2026, with the solicitation published on July 28, 2026. The place of performance and point of contact details are unspecified, but performance is expected to support defense-related operations and information systems under the jurisdiction of the DoD. Contractors must demonstrate expertise in defense cybersecurity frameworks and possess the ability to deliver compliant solutions without reliance on government-provided infrastructure or pre-existing templates.