Cybersecurity Compliance & CMMC Support

The contract seeks a subcontractor to assist the prime contractor in achieving compliance with NIST SP 800-171 standards and preparing for a CMMC Level 2 self-assessment, focusing on the implementation of required cybersecurity documentation and system controls. The work will involve evaluating current security practices, identifying gaps in compliance, and developing or enhancing policies, procedures, and technical controls aligned with NIST guidelines to meet the requirements of CMMC Level 2. The subcontractor is expected to provide expert guidance throughout the assessment preparation process to ensure the prime contractor can successfully demonstrate compliance without external audit. This opportunity is designated as a Total Small Business Set-Aside under the SBA program with a NAICS code of 541512, indicating it is specifically reserved for small businesses in the computer systems design and related services sector. Performance of the contract will occur at Robins Air Force Base, Georgia, with a response deadline of August 6, 2026, and the solicitation was posted on July 26, 2026. The contracting activity is under the Department of Defense, specifically the Warner Robins organization, and the task is part of a broader effort to strengthen cybersecurity readiness across the defense industrial base.