Cybersecurity Compliance and CMMC Assessment

The contract pertains to the implementation of NIST SP 800-171 security controls and the preparation of a system for a CMMC Level 2 third-party assessment, requiring comprehensive cybersecurity hardening of information systems and the establishment of formal incident reporting procedures. Work must be conducted at Robins Air Force Base, Georgia, with a focus on aligning technical and procedural safeguards to meet federal cybersecurity standards for handling controlled unclassified information. The effort involves configuring systems to satisfy specific controls, documenting policies, training personnel, and ensuring audit readiness for an independent evaluation by an accredited assessor. This subcontract is issued under NAICS code 541512 for computer systems design services and is managed by the Department of Defense through Land Supplier Ops Vehicle SPT. Proposals are due by August 3, 2026, with the solicitation posted on July 23, 2026. The successful contractor will be expected to deliver a fully compliant environment ready for external validation, with all activities centered on achieving and maintaining CMMC Level 2 certification. No set-aside provisions are specified, and performance is tied to the specific location at Robins AFB, where systems and operations must be brought into full alignment with required cybersecurity protocols.