Cybersecurity Compliance (CMMC & NIST SP 800-171)

The contract requires comprehensive cybersecurity compliance support to achieve CMMC Level 2 readiness and fully implement NIST SP 800-171 controls for the protection of Covered Defense Information. This includes developing and organizing system documentation necessary to demonstrate adherence to security requirements, conducting a self-assessment against the CMMC framework, and preparing and submitting a System Security Plan and scorecard through the Supplier Performance Risk System. The work focuses on safeguarding CDI by ensuring all applicable security controls are not only documented but also operationalized across relevant systems and processes. The effort is critical for maintaining eligibility to handle sensitive defense data and aligning with Department of Defense cybersecurity mandates. This is a subcontract under the NAICS code 541512 for information technology services, with a response deadline of August 3, 2026. The contracting entity is the Department of Defense under the Land Supplier Operations Vehicle Support organization. The performance location and specific point of contact are not detailed in the provided data, but the work is expected to be completed in support of federal defense cybersecurity objectives. Contractors must possess the technical expertise to navigate CMMC Level 2 requirements, interpret NIST SP 800-171 controls, and deliver accurate SPRS submissions to validate compliance status without external audit assistance.