Cybersecurity Compliance & CMMC Level 2 Self-Assessment

The contract requires execution of a CMMC Level 2 self-assessment to validate compliance with NIST SP 800-171 standards for systems handling covered defense information, ensuring all required cybersecurity controls are properly implemented and documented. This includes preparing and submitting a Security Assessment Report through the Supplier Performance Risk System if applicable, to meet Department of Defense cyber requirements for subcontractors supporting sensitive defense programs. The work is tied to systems operating at Kings Bay, Georgia, with a tight turnaround period as the response deadline falls shortly after the solicitation posting date, indicating urgency in securing compliant capabilities. The NAICS code 541611 identifies this as an information technology consulting service, emphasizing the need for specialized expertise in cybersecurity frameworks and defense contract compliance. The contract is structured as a subcontract under the Fluid Handling Division of the Department of Defense, with no set-aside provisions specified, meaning any qualified vendor may respond.