Cybersecurity Compliance and CMMC Support

The contract focuses on providing support for achieving and maintaining cybersecurity compliance in alignment with NIST SP 800-171 guidelines and the Cybersecurity Maturity Model Certification (CMMC) Level 2, specifically through self-assessment certification. Key activities include system hardening, preparing for audits, and submitting information to the Supplier Performance Risk System (SPRS) to ensure compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) requirements. This effort aims to enhance the security posture of systems to meet stringent Department of Defense standards. This subcontract opportunity is designated as a Total Small Business Set-Aside under FAR 19.5, with the NAICS code 541512 signaling a focus on computer systems design services. The contracting agency is the Department of Defense, specifically the Nuwc Division Newport, with the place of performance located in Newport, Rhode Island. Responses to the solicitation are due by May 29, 2026, following the posting date of May 20, 2026. The contract emphasizes the need for specialized cybersecurity services to support defense-related compliance mandates, offering a critical role in safeguarding sensitive government information.