Cybersecurity Compliance and CMMC Support

The contract seeks specialized support to implement, assess, and document compliance with NIST SP 800-171 and CMMC Level 2 requirements across systems handling controlled unclassified information. The scope includes developing and maintaining system security plans, conducting gap assessments, and ensuring audit readiness through thorough documentation and remediation planning. The work is focused on achieving and sustaining compliance in alignment with Department of Defense cybersecurity standards, with an emphasis on operational readiness and continuous monitoring practices. Performance of the contract will be centered at Robins Air Force Base, Georgia, with the subcontractor expected to deliver technical expertise in cybersecurity frameworks, risk management, and compliance verification. The solicitation is open for submissions until July 27, 2026, under NAICS code 541512 for computer systems design services, and is categorized as a subcontract within the Aviation Supply Chain initiative. All activities must align with federal guidelines to ensure secure handling of sensitive information and to prepare for third-party assessments under the CMMC program.