Cybersecurity Compliance and CUI Handling (CMMC Level 2)

The contract requires comprehensive support to achieve CMMC Level 2 certification and ensure full compliance with NIST SP 800-171 standards for the handling of Controlled Unclassified Information under DFARS regulations. The work involves a full range of cybersecurity readiness activities, including policy development, system configuration, employee training, documentation enhancement, and audit preparation to meet the stringent requirements for protecting sensitive government data. The subcontractor must demonstrate proven experience in implementing these frameworks within defense supply chain environments and be prepared to undergo rigorous assessment to validate compliance. Performance of this contract is localized to Groton, Connecticut, with the work under the purview of the Department of Defense’s ASC Commodities Division. The solicitation is structured as a subcontract with a NAICS code of 541611, specifically targeting cyber security consulting services. Interested parties must submit responses by August 10, 2026, following the posting date of August 2, 2026. While no specific set-aside provisions are indicated, the scope demands a contractor with technical expertise in CMMC, NIST 800-171, and DFARS compliance, capable of delivering an end-to-end cybersecurity compliance solution that meets federal defense standards.