Cybersecurity Compliance and CMMC Assessment

The contract requires comprehensive support for a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment to ensure full compliance with NIST Special Publication 800-171 for systems managing controlled unclassified information tied to valve production and delivery operations. The work involves implementing, documenting, and validating security controls necessary to protect sensitive data throughout the supply chain, with a focus on meeting federal cybersecurity standards for defense contractors. The subcontractor must demonstrate the ability to assess current security postures, identify gaps, and execute corrective actions aligned with CMMC Level 2 requirements. The contract is issued under the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION and is performance-based at Robins Air Force Base, Georgia, with a zip code of 31098-1887. It is classified as a subcontract with a NAICS code of 541512, indicating it relates to custom computer programming services. The solicitation was posted on July 19, 2026, and responses are due by July 27, 2026, making timing critical for submission. All technical and compliance efforts must be completed in accordance with DoD expectations, and the successful bidder will be responsible for maintaining ongoing adherence to NIST 800-171 controls to sustain certification and support the integrity of defense-related valve manufacturing systems.