Cybersecurity Compliance and CMMC Implementation

This contract requires the implementation of Cybersecurity Maturity Model Certification Level 2 controls to ensure compliance with federal requirements for handling Covered Defense Information. The work involves aligning cybersecurity practices with NIST SP 800-171 standards, conducting a comprehensive self-assessment of current security postures, and obtaining third-party certification to validate adherence to CMMC Level 2 requirements. All activities must be completed in accordance with Department of Defense cybersecurity frameworks and are intended to secure sensitive defense data throughout the supply chain. The performance location is designated as Tinker AFB with a zip code of 73145-8000, and the subcontract is classified under NAICS code 541512, indicating it pertains to computer systems design services. Responses to this solicitation are due by August 3, 2026, and the contract is issued under the Land Supply Chain organization within the Department of Defense. The effort is focused exclusively on achieving and sustaining CMMC Level 2 certification, which includes documentation, process implementation, employee training, and continuous monitoring of security controls. There is no set-aside designation specified, and participation is open to eligible parties capable of delivering full CMMC compliance services. The technical scope demands proven experience in cybersecurity compliance, familiarity with DOD supply chain requirements, and the ability to coordinate with external auditors for certification validation. All work must be completed in a manner that ensures uninterrupted access to defense information systems while meeting the strict compliance benchmarks mandated for contractors supporting national security operations.