Cybersecurity Compliance & CMMC Reporting

This subcontract focuses on achieving and maintaining Cybersecurity Maturity Model Certification (CMMC) compliance at Level 2 or Level 3 for systems that manage Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The contractor is responsible for ensuring continuous adherence to the required cybersecurity standards and submitting annual affirmations through the Supplier Performance Risk System (SPRS). If necessary, the contractor must also develop and manage Plans of Action and Milestones (POA&M) to address any compliance gaps. The contract is a total small business set-aside under the North American Industry Classification System (NAICS) code 541611, related to administrative management and general management consulting services. It is issued by the Department of Defense through the Opl Contracting AFSC/PZIO office and is based in Warner Robins, with the ZIP code 31098. The scope centers on supporting DoD cybersecurity requirements to safeguard sensitive defense information through effective compliance and reporting measures.