Cybersecurity Compliance & SPRS Reporting Support

The contract seeks support services to achieve Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance for handling Controlled Unclassified Information, with a focus on performing NIST SP 800-171 assessments, developing Plans of Action and Milestones (POA&M), and submitting accurate Security Practices and Readiness System (SPRS) reporting. These activities are critical to demonstrating proper cybersecurity controls and readiness for Department of Defense contracting requirements. The work is scoped to ensure the entity maintains documented evidence of compliance, addresses identified gaps, and continuously updates remediation plans in alignment with federal cybersecurity standards. Performance is to be conducted at Hill Air Force Base, Utah, with a zip code of 84056-5734, and the contract is classified as a subcontract under NAICS code 541611. The opportunity was posted on May 8, 2026, with a response deadline of May 13, 2026, indicating a narrow window for submission. The contracting organization is the Maritime Supply Chain under the Department of Defense, and all deliverables must meet U.S. federal cybersecurity frameworks to safeguard sensitive information. The successful bidder will be responsible for ensuring full alignment of internal processes with CMMC Level 2 controls and maintaining compliance documentation for audit readiness.