Cybersecurity Compliance & CMMC Level 2 Implementation

The contract seeks subcontractor support to implement and achieve CMMC Level 2 compliance across all applicable systems, with a focus on meeting the security requirements outlined in NIST SP 800-171. Key deliverables include conducting a comprehensive system assessment to identify gaps, developing and documenting cybersecurity policies and procedures, enforcing role-based access controls, establishing an incident response plan, and ensuring full audit readiness through documentation, training, and continuous monitoring. The work is expected to align with DoD cybersecurity standards and must be executed to satisfy contractual obligations prior to the response deadline. Performance of this contract is required at Robins Air Force Base, Georgia, with a target completion timeframe aligned with the solicitation’s July 2026 deadline. The effort falls under NAICS code 541512 for computer systems design services and is structured as a subcontract within the Department of Defense's ASC Commodities Division. All activities must be carried out in accordance with federal cybersecurity frameworks, emphasizing the protection of controlled unclassified information and sustainable compliance practices that can be validated during third-party assessments.