Cybersecurity Compliance and CMMC Support

The contract requires the implementation and documentation of NIST SP 800-171 security controls and preparation for a CMMC Level 2 self-assessment specifically for systems handling covered defense information. This effort is focused on ensuring compliance with federal cybersecurity standards applicable to defense contractors, with a particular emphasis on safeguarding sensitive data through structured controls related to access, audit, configuration, incident response, and risk management. The work must be thoroughly documented to support an accurate self-assessment and to demonstrate alignment with the Cybersecurity Maturity Model Certification requirements at Level 2, which includes both technical and organizational practices. The solicitation is issued as a subcontract under the Department of Defense, with the contracting office identified as LSO COMBAT VEHICLES AND ARMAMENT, and falls under NAICS code 541512 for computer systems design services. Responses are due by July 29, 2026, with the opportunity posted on July 14, 2026. The place of performance and point of contact details are not specified, but performance is expected to support defense information systems, likely requiring direct engagement with DoD-compliant infrastructure and security protocols. Participation involves rigorous adherence to documentation standards and may require coordination with existing system architectures to integrate controls without disrupting operations.