Cybersecurity Compliance (CMMC and NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 standards to protect Covered Defense Information (CUI). It also mandates ensuring that systems maintain a valid Cybersecurity Maturity Model Certification (CMMC), reflecting compliance with required security practices. The work is to be performed as a subcontract under NAICS code 541512, focusing on information technology services. The contract is issued by the Department of Defense, specifically through Navsup Weapon Systems Support, with the place of performance located in Torrance. The solicitation was posted on May 20, 2026, and responses are due by June 19, 2026. While certain details such as the exact agency point of contact and set-aside status are not specified, the primary objective is centered on cybersecurity compliance to ensure defense systems handling sensitive information meet federal security requirements.