Cybersecurity Compliance and CUI Protection (CMMC Level 2)

This contract requires the implementation and maintenance of cybersecurity controls to safeguard Controlled Unclassified Information across design, manufacturing, and supply chain systems in alignment with CMMC Level 2 requirements. The scope encompasses establishing, validating, and sustaining technical and administrative safeguards to ensure compliance with federal cybersecurity standards for handling CUI within defense-related operations. Work is to be performed primarily at Hill AFB, Utah, with all systems and processes subject to continuous monitoring and audit readiness to meet stringent Department of Defense protocols. The procurement is structured as a subcontract and is set aside exclusively for small businesses under the SBA Total Small Business Set-Aside authority, indicating a preference for small business concerns to lead performance. The North American Industry Classification System code 541512 identifies the work as computer systems design and related services, emphasizing technical expertise in cybersecurity architecture and implementation. The solicitation was posted on July 14, 2026, with responses due by July 24, 2026, and the contract is managed under the Maritime Supply Chain office within the Department of Defense. All participants must be prepared to demonstrate full CMMC Level 2 compliance, including documentation of policies, training, access controls, and incident response capabilities.