Cybersecurity Compliance & CUI Handling Support (NIST SP 800-171 / CMMC Level 2)

The contract requires support for implementing NIST SP 800-171 security controls and preparing for a CMMC Level 2 self-assessment on behalf of a prime contractor, ensuring compliance with cybersecurity requirements for handling Controlled Unclassified Information. Services encompass the full lifecycle of cybersecurity readiness including policy development, control implementation, documentation of security practices, and establishment of cyber incident reporting procedures aligned with federal guidelines. The effort is focused on achieving and maintaining CMMC Level 2 certification, which demands robust technical and administrative safeguards to protect CUI across systems and processes. Performance is to be conducted in support of the Department of Defense at Peterson Air Force Base with a zip code of 80914-2104. The work falls under NAICS code 541611 for management consulting services and is classified as a subcontract opportunity. Interested parties must submit responses by August 10, 2026, with the solicitation posted on July 28, 2026. The contract emphasizes adherence to federal cybersecurity standards and direct assistance to the prime contractor in meeting Defense Industrial Base compliance obligations related to CUI protection and incident response readiness.