Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for achieving and maintaining CMMC Level 2 compliance by implementing and documenting the NIST SP 800-171 security controls necessary to protect covered defense information. This includes conducting a self-assessment of current cybersecurity posture, developing required documentation, and executing technical and administrative controls aligned with the NIST framework to meet the CMMC requirements. The work is scoped to ensure full readiness for third-party assessment and continuous compliance within a DoD ecosystem. Performance of this subcontract is required at Tinker Air Force Base, with a response deadline of May 19, 2026, and the solicitation is categorized under NAICS code 541611 for management, scientific, and technical consulting services. The contracting entity is the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV, and the effort supports broader DoD cybersecurity objectives by institutionalizing defense information protection standards across the supply chain. All activities must be completed in alignment with federal cybersecurity mandates and tailored to the specific operational environment at the designated performance location.