Cybersecurity Compliance & CMMC Support

The contract seeks subcontractor support to achieve and maintain cybersecurity compliance with NIST SP 800-171 standards and prepare for CMMC certification, specifically for entities handling controlled unclassified information. Services include developing and maintaining comprehensive System Security Plans, implementing required security controls, and completing SPRS attestation to demonstrate compliance posture. All activities must align with Department of Defense requirements and are targeted at ensuring readiness for third-party audits and contractual obligations under CMMC frameworks. The work is to be performed in support of the ASC SUPPLIER OPER AE AND AF DIV under the broader DoD acquisition structure. This subcontract opportunity is open for response until August 20, 2026, and is classified under NAICS code 541512 for computer systems design services. There is no set-aside designation specified, and performance location details are not provided, but the work is expected to support DoD supply chain security initiatives. Interested parties must navigate the DIBBS platform via the provided link to access full solicitation details and submit proposals ahead of the deadline. The contractor is expected to deliver documented, auditable processes and artifacts that validate ongoing compliance and readiness for CMMC level assessment.