Cybersecurity Compliance and CMMC Level 2 Implementation

The contract seeks cybersecurity consulting services to ensure full compliance with NIST Special Publication 800-171 and to achieve a successful CMMC Level 2 self-assessment for defense contractor systems. The work is focused on implementing and validating security controls required to protect controlled unclassified information within systems operating under Department of Defense requirements. The subcontractor will be responsible for assessing current security postures, identifying gaps against NIST 800-171 controls, developing remediation plans, documenting policies and procedures, and preparing the necessary evidence to demonstrate compliance during the CMMC Level 2 evaluation. Performance of the contract is required at the location in Kingsville, Texas, with a zip code of 78363-5017, and the work must be executed under the NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 20, 2026, with responses due by July 28, 2026. This subcontract is issued under the ASC SUPPLIER OPER OEM DIVISION, part of the Department of Defense, and the effort is critical to maintaining eligibility for future defense contracts requiring CMMC certification. All deliverables must align with federal cybersecurity standards to ensure the contractor's systems remain secure and compliant throughout the lifecycle of the program.