Cybersecurity Compliance and CMMC Implementation

The contract entails the implementation and ongoing maintenance of cybersecurity controls to achieve CMMC Level 2 compliance for systems that handle covered defense information. This subcontract requires the contractor to establish, document, and operationalize a robust cybersecurity framework aligned with the Cybersecurity Maturity Model Certification standards, ensuring that all technical and administrative safeguards are properly integrated into the defense information environment. The work must be performed at Holloman Air Force Base, with a focus on securing networks, devices, and data against potential threats while maintaining continuous compliance throughout the contract duration. All activities under this agreement must adhere to the North American Industry Classification System code 541512, indicating that the services fall under computer systems design and related activities. The solicitation was posted on July 20, 2026, with responses due by July 31, 2026, and is issued under the Department of Defense, specifically by the Construction & Equipment Manu & Con organization. The contract is not designated for any specific type of set-aside, and the place of performance is fixed at the specified zip code in New Mexico, requiring the contractor to meet all regulatory, technical, and reporting obligations in alignment with federal defense cybersecurity mandates.