Cybersecurity Compliance and CMMC Assessment Support

The contract requires comprehensive support to ensure full compliance with DFARS 252.204-7012 and the NIST SP 800-171 security requirements, with a specific focus on achieving CMMC Level 2 certification. This includes the implementation of all necessary technical and operational security controls, ongoing assessment and documentation of those controls, and preparation of official submissions required by the Department of Defense. The work involves a detailed review of existing cybersecurity practices, identification of gaps against NIST standards, and execution of remediation steps to meet CMMC Level 2 criteria, culminating in a formal assessment and certification process. The contract is a subcontract tied to a Department of Defense initiative, with performance centered at Robins Air Force Base, Georgia, under the ASC SUPPLIER OPER AE AND AF DIV. All activities must be completed by the response deadline of May 21, 2026, and the work falls under NAICS code 541512, indicating it involves computer systems design and related services. The subcontractor is expected to deliver a fully compliant and documented cybersecurity posture that meets federal government standards for handling controlled unclassified information, with deliverables including assessment reports, policy documentation, control implementation records, and evidence of audit readiness.