Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by implementing the National Institute of Standards and Technology Special Publication 800-171 controls to satisfy the Defense Federal Acquisition Regulation Supplement clause 252.204-7012, which governs the protection of covered defense information. The work involves conducting a self-assessment of current cybersecurity posture, identifying gaps, and executing the necessary technical and administrative measures to align with NIST SP 800-171 requirements, ensuring the contractor meets the Department of Defense’s cybersecurity standards for handling sensitive unclassified information. This is a subcontract under the Department of Defense, specifically managed by the Fluid Handling Division, with performance obligated at Tinker Air Force Base, Oklahoma, under NAICS code 541611 for management, scientific, and technical consulting services. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, and is intended to support a defense contractor’s journey toward CMMC certification through structured compliance activities, documentation, and validation of security controls. The effort is mission-critical for maintaining eligibility to work on defense contracts requiring safeguarding of controlled unclassified information.