Cybersecurity Compliance (CMMC Implementation)

This contract mandates the implementation and ongoing compliance with the Cybersecurity Maturity Model Certification (CMMC) framework to safeguard Controlled Unclassified Information (CUI) generated during research and development efforts. The work must align with CMMC requirements to ensure secure handling, storage, and transmission of sensitive data within the context of defense-related projects, with full adherence to NIST SP 800-171 controls as the baseline. The subcontract is exclusively available to small businesses under the SBA’s Total Small Business Set-Aside, specifically targeting entities with fewer than 500 employees that qualify under SBIR or STTR programs. The North American Industry Classification System code 541512 indicates the scope centers on computer systems design and related services, aligning with innovative research activities supported by the Defense Advanced Research Projects Agency under the U.S. Department of Defense. Proposals must be submitted by the deadline of July 22, 2026, and performance is expected to occur in support of federally funded R&D initiatives, with no specific geographic location designated for performance.