Cybersecurity Compliance & CMMC Level 2 Support

This contract supports Cybersecurity Compliance and CMMC Level 2 self-assessment for organizations handling federal contract information, with a focus on achieving compliance through system hardening, comprehensive documentation, and adherence to NIST SP 800-171 and DFARS 252.204-7012 requirements. The work involves implementing technical and procedural safeguards to meet the mandatory security controls outlined in these standards, ensuring that the contractor’s information systems are properly configured and auditable for CMMC Level 2 certification. The effort is targeted at preparing the contractor to demonstrate readiness through internal assessments and documentation submissions required under the Cybersecurity Maturity Model Certification program. The contract is a subcontract under the Department of Defense, issued by the Land Supply Chain agency, with performance expected to occur at Hill Air Force Base, Utah, 84056-5734. It was posted on July 16, 2026, with a response deadline of July 27, 2026, and falls under NAICS code 541512 for computer systems design services. The scope emphasizes operational readiness for CMMC Level 2, requiring detailed evidence of policy implementation, access controls, incident response readiness, and continuous monitoring of cybersecurity practices. All activities must align with DoD expectations for protecting federal contract information and sustaining compliance through documented processes and validated system configurations.