Cybersecurity Compliance and CMMC Self-Assessment Support

The contract requires support to assist a supplier in achieving CMMC Level 2 compliance by fully implementing the NIST SP 800-171 security controls and completing the required self-assessment using Form RD004. This effort is critical for the supplier to meet federal cybersecurity standards and maintain eligibility for Department of Defense contracts involving controlled unclassified information. The scope encompasses guiding the supplier through each of the 110 technical and organizational controls outlined in NIST SP 800-171, documenting evidence of implementation, and preparing a compliant self-assessment report that accurately reflects the organization’s cybersecurity posture. The subcontract is issued under NAICS code 541512, indicating it relates to computer systems design services, and is tied to the Department of Defense’s Maritime Supply Chain ESOC Buys initiative. Performance of the work must occur at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026, providing a limited window for qualified parties to submit proposals. The supplier must demonstrate expertise in CMMC compliance frameworks, NIST control implementation, and readiness for third-party assessments, ensuring all documentation meets DOD requirements without external validation beyond the self-assessment stage.