Cybersecurity Compliance and CMMC Level 2 Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to achieve CMMC Level 2 compliance for systems handling covered defense information related to stud production. This effort is focused on ensuring that all technical, procedural, and administrative safeguards align with the requirements of the Cybersecurity Maturity Model Certification program to protect sensitive data within the defense industrial base. The work must be performed at the specified place of performance in Jacksonville, Florida, with the contractor responsible for sustaining compliance through continuous monitoring, documentation, and adjustment of controls as needed to meet evolving regulatory standards. This is a subcontract under the Department of Defense, solicited under NAICS code 541512, which pertains to computer systems design services. The opportunity was posted on July 29, 2026, with a response deadline of August 6, 2026. The contracting activity is managed by SMSG AVIATION SUP CH CORPORATE LTC, and the successful offeror will need to demonstrate proven capability in executing cybersecurity compliance projects aligned with federal defense standards. All efforts must be directed toward securing information systems that process, store, or transmit covered defense information, with emphasis on operational readiness, auditability, and adherence to the latest CMMC framework without reliance on external documentation.