Cybersecurity Compliance & CMMC Level 2 Assessment

The contract requires support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by implementing and validating the National Institute of Standards and Technology Special Publication 800-171 controls to safeguard covered defense information. This includes hardening systems against cyber threats, developing comprehensive documentation that demonstrates control adherence, and preparing for third-party assessments to verify audit readiness. The work is focused on ensuring the contractor meets the stringent cybersecurity requirements mandated for handling federal contract information within the defense supply chain. All activities must align with the NIST 800-171 framework and support a successful CMMC Level 2 self-assessment outcome. The contracting activity is issued under the Department of Defense through the Aviation Supply Chain ESOC Buys organization, with performance slated for Fallon, Nevada, at zip code 89496-0001. It is structured as a subcontract with a North American Industry Classification System (NAICS) code of 541512, indicating it relates to computer systems design services. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026, with the opportunity accessible through the DIBBS platform. There is no set-aside designation, and the contract is open to eligible subcontractors responding to the stated cybersecurity compliance requirements.