Top

Cybersecurity Compliance and CMMC Assessment Support

Active

Federal

Response Deadline08/17/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → YOKOSUKA JAPAN CML PHNView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

FPO, AP, 96349-0011, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 4

subcontract

Response DeadlineAug 17

Submission deadline

Response Deadline

08/17/2026, 05:00:00 PM UTCin 8 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Defense → YOKOSUKA JAPAN CML PHN

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → YOKOSUKA JAPAN CML PHN

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Support CMMC Level 2 self-assessment and compliance with NIST SP 800-171 and DFARS cybersecurity requirements for handling covered defense information.

Similar Contracts

Same NAICS industry code

NAICS: 541512

New

DIBBS

Cybersecurity and CMMC Compliance Support

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information within contractor systems that handle classified or sensitive contract data. This effort is mandatory for ensuring compliance with federal cybersecurity standards applicable to defense contractors and involves a full assessment and record-keeping of all required security controls across systems processing protected information. The work must be completed in alignment with the NIST framework and demonstrated through formal documentation to meet contractual obligations. The contract is classified as a subcontract under the NAICS code 541512, associated with computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense with performance required in Tracy, California, 95304-5000. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a tight turnaround for submission. Although no set-aside type is specified, the contract is governed by DoD cybersecurity regulations and demands strict adherence to NIST guidelines to protect national defense information, making compliance non-negotiable for award consideration.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance and CMMC Assessment Support

LSO COMBAT VEHICLES AND ARMAMENT

POSTED

DEADLINE

Cybersecurity Compliance & NIST 800-171 AssessmentThe contract requires the performance of NIST SP 800-171 cybersecurity assessments to ensure systems handling Covered Defense Information meet federal security requirements. The effort focuses on evaluating compliance with the specified framework, identifying gaps, and implementing necessary safeguards to protect sensitive data. All assessment outcomes must be documented and submitted through the Supplier Performance Risk System to validate adherence to contractual and regulatory obligations. The work is tied to a subcontract under the Department of Defense and is to be performed at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026, under the NAICS code 541512, indicating it pertains to computer systems design services. There is no set-aside designation specified, and the contract does not include a designated point of contact within the provided details.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity Compliance and Reporting (Subcontractor Support)This contract requires subcontractor support to ensure compliance with NIST SP 800-171 standards for protecting covered defense information, while also mandating timely reporting of any cyber incidents in accordance with DFARS 252.204-7012. The work involves implementing and maintaining security controls aligned with federal cybersecurity requirements to safeguard sensitive data handled by the subcontractor on behalf of the Department of Defense. Performance is expected to be conducted at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response submission set for August 17, 2026. The solicitation falls under NAICS code 541512, indicating it is focused on computer systems design services, and is issued under the ASC SUPPLIER OPER OEM DIVISION, with no set-aside classification specified. The subcontractor must be prepared to demonstrate robust cybersecurity practices and incident response capabilities to meet defense contractual obligations.

ASC SUPPLIER OPER OEM DIVISION

POSTED

DEADLINE

Cybersecurity and CMMC Assessment SupportThe contract seeks to provide specialized support to a prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, specifically focused on the safeguarding of Controlled Unclassified Information (CUI). The effort involves assisting the prime contractor with implementing required security controls, conducting gap assessments, preparing documentation, and ensuring adherence to CMMC framework standards to meet Department of Defense cybersecurity requirements. The work is aligned with NAICS code 541512, indicating it falls under computer systems design and related services, and is structured as a subcontract to support broader defense contracting obligations. This subcontract is tied to performance at Hill Air Force Base with ZIP code 84056-5734 and was posted on August 9, 2026, with a response deadline of August 17, 2026. The acquiring agency is the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is part of a broader defense supply chain modernization and cybersecurity enhancement initiative. The subcontractor must possess demonstrated expertise in CMMC Level 2 implementation, knowledge of NIST SP 800-171 controls, and experience working within defense contracting environments to ensure the prime contractor meets all assessment and certification prerequisites within the established timeline.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

POSTED

DEADLINE

Cybersecurity for Covered Defense Information (CDI)

MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

DEADLINE

CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.

ACTIVE DEVICES DIVISION

POSTED

about 9 hours ago

DEADLINE

in 11 days

View Details

More opportunities from Department Of Defense → YOKOSUKA JAPAN CML PHN

Same awarding agency

NAICS: 488510

New

DIBBS

Domestic and International Shipping/Transportation Coordination

Freight Transportation Arrangement

POSTED

DEADLINE

Hazardous Materials Compliance and Labeling

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Specialized Packaging and Preservation Services

POSTED

DEADLINE

Electromechanical Actuator Manufacturing and Assembly

Other Aircraft Parts and Auxiliary Equipment Manufacturing

POSTED

DEADLINE

Solicitation # SPE7MC-26-T-167Y

The contract pertains to the procurement of one actuator, electromechanical, identified by NSN 4810-01-558-6065 and part number MS5Q, supplied by Curtiss-Wright Flow Control Corporation and Emerson Automation Solutions. The item is classified as a USML item requiring total mutilation to the point of scrap worldwide upon obsolescence or end of life, in accordance with Note 7. Technical and quality specifications are governed by the DLA Master List of Technical and Quality Requirements, referenced by R or I numbers, with compliance determined by the master revision effective on the solicitation issue date or award date. The contract mandates strict adherence to DLA packaging standards under RP001 and MIL-STD-2073-1E, including preservation methods, cushioning, wrappings, and container selection to prevent corrosion, damage, or deterioration during storage and transit. All bare metal surfaces must be adequately preserved for at least one year, and dissimilar metals must be isolated to avoid galvanic corrosion. The item must be individually preserved, wrapped, cushioned, and packed per specified materials and methods, with packaging designed to immobilize the item and ensure even weight distribution. Marking must conform to MIL-STD-129 without special marking codes. Delivery is required FOB destination within 20 days, with no variance allowed in quantity, and both inspection and acceptance occur at origin. The shipment must meet Cybersecurity Maturity Model Certification Level 2 self-assessment requirements, and covered defense information applies. The delivery address is DLA Distribution Yokosuka, Japan, with a FPO shipping address in the United States, and transportation procedures follow DLAD Proc Notes C19 and C20. The item is subject to the removal of government identification from non-accepted supplies and requires compliance with federal procurement regulations. The solicitation number is SPE7MC-26-T-167Y, with a response deadline of August 17, 2026, and an original required delivery date of July 2, 2026. The point of contact is Paula Mcclary at DLA, and the contract falls under NAICS code 336413 for aerospace product and parts manufacturing.

Other Aircraft Parts and Auxiliary Equipment Manufacturing

POSTED

5 days ago

DEADLINE

in 8 days

View Details