Cybersecurity Compliance & CMMC Assessment Support

The contract seeks a subcontractor to assist the prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance and full adherence to NIST SP 800-171 standards for protecting controlled unclassified information (CUI) as mandated by DFARS clauses. The support will encompass a comprehensive range of cybersecurity readiness activities, including gap analysis, policy and procedure development, implementation of technical and administrative controls, employee training, documentation preparation, and preparation for third-party CMMC assessments. The goal is to ensure the prime contractor meets all federal cybersecurity requirements for handling CUI across its operations and supply chain. Performance is expected to be carried out at Hill Air Force Base, Utah, with a response deadline of August 13, 2026, and the opportunity was posted on August 2, 2026. The work falls under NAICS code 541512 for Computer Systems Design Services, indicating a focus on technical and advisory services rather than product procurement. The contracting entity is the Department of Defense through its Depot Hill office, and the subcontract is intended to reinforce the prime’s ability to maintain a secure, compliant environment in alignment with DoD cybersecurity mandates. All deliverables must be aligned with current CMMC framework guidelines and NIST standards to ensure successful third-party certification.