Cybersecurity Compliance & CMMC Assessment Support

The contract involves providing specialized consulting and implementation services to support achieving CMMC Level 2 certification, which includes conducting a thorough gap analysis, preparing necessary documentation, and coordinating efforts with a C3PAO (Certified Third-Party Assessment Organization). Additionally, the contractor is responsible for submitting the NIST SP 800-171 Basic Assessment to the Supplier Performance Risk System (SPRS), ensuring compliance with cybersecurity requirements for defense-related information systems. This subcontract is issued by the Department of Defense under the ASC Supplier Operations AE and AF Division, with performance taking place at Cannon Air Force Base, ZIP code 88103-5108. The solicitation was posted on May 13, 2026, with a response deadline of May 21, 2026. The NAICS code for the contract is 541512, indicating it falls within the computer systems design services sector. The opportunity is accessible via the DIBBS platform, and although no specific type of set-aside or organization type is noted, the contract’s focus is squarely on supporting defense contractor compliance with cybersecurity standards.