Cybersecurity Compliance and CMMC Assessment Support

The contract seeks a subcontractor to provide third-party cybersecurity assessment services to ensure compliance with NIST SP 800-171 and the Cybersecurity Maturity Model Certification Level 2 for systems that handle controlled unclassified information. The scope requires independent evaluation of security controls, documentation review, and validation of practices to meet federal standards for protecting sensitive defense-related data. The work is centered at the performance location in Anniston, Alabama, with a zip code of 36201-4199, and is classified under NAICS code 541612 for management consulting services. The solicitation was posted on July 12, 2026, with responses due by July 23, 2026, and is issued under the Department of Defense through the Land Supply Chain organization. The contract type is a subcontract, indicating it supports a larger prime contract or program focused on securing defense supply chain systems. The recipient must possess expertise in CMMC Level 2 requirements and the ability to conduct rigorous assessments aligned with NIST guidelines. There is no set-aside designation specified, meaning the opportunity is open to all qualified entities regardless of size or status. All work must be completed in accordance with federal cybersecurity frameworks to mitigate risk and maintain compliance within the defense industrial base.