Cybersecurity Compliance and CMMC Support

The contract focuses on ensuring that systems involved in calibration and reporting processes adhere to Cybersecurity Maturity Model Certification (CMMC) standards. It specifically requires these systems to support annual Supplier Performance Risk System (SPRS) self-assessments for the proper handling of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI), thereby maintaining compliance with Department of Defense cybersecurity requirements. The contract is issued as a total small business set-aside under FAR 19.5, aligned with NAICS code 541512, which pertains to computer systems design services. Administered by the Navsup Fleet Logistics Center Norfolk under the Department of Defense, this subcontract is scheduled for response by mid-June 2026. The work will be performed in Williamsburg, and the solicitation emphasizes the integration of cybersecurity measures within existing calibration and reporting systems to ensure ongoing compliance and secure information management. This effort supports DoD’s broader cybersecurity goals by reinforcing the protection of sensitive contract-related information and facilitating standardized self-assessment processes.