Cybersecurity Compliance and CMMC Implementation Support

The contract seeks a small business subcontractor to support a prime contractor in achieving CMMC Level 2 compliance through the implementation of NIST SP 800-171 security controls and associated documentation. The work focuses on establishing, validating, and maintaining the technical and procedural safeguards required to protect controlled unclassified information within defense supply chain systems. The subcontractor will be expected to provide expert guidance on cybersecurity frameworks, conduct gap assessments, develop policy and procedural documentation, and facilitate audits or readiness reviews to ensure alignment with CMMC requirements. This engagement is under a Total Small Business Set-Aside, designated for businesses certified under the SBA’s small business program, and falls under NAICS code 541512 for computer systems design services. The place of performance is identified as Corpus Christi, Texas, with a zip code of 78419-5255. The solicitation was posted on July 28, 2026, and responses are due by August 5, 2026. The contracting activity is managed by the ASC Commodities Division under the Department of Defense, and the work will be executed through a subcontract arrangement. All efforts must be completed in alignment with federal cybersecurity standards and the expectations of the Defense Industrial Base.