Cybersecurity Compliance (CMMC Level 2)

This contract requires the implementation and ongoing maintenance of cybersecurity controls to achieve and sustain compliance with the Cybersecurity Maturity Model Certification (CMMC) Level 2 standard for systems that process, store, or transmit covered defense information. The work involves establishing technical, operational, and administrative safeguards aligned with NIST SP 800-171 revision 2 and other relevant frameworks to protect sensitive federal data from unauthorized access, disclosure, or compromise. The subcontractor must demonstrate the ability to institutionalize these controls across all relevant systems, maintain continuous compliance, and prepare for third-party assessments required under the CMMC program. The contract is structured as a total small business set-aside under the SBA’s regulations, meaning only small businesses can compete for award. It is classified under NAICS code 541512 for computer systems design services and is issued by the Department of Defense through the Land Supplier Operations Vehicle Support organization. Responses are due by August 14, 2026, and the solicitation was posted on July 30, 2026. The performance location is unspecified, but the work will support defense-related systems and must meet all federal cybersecurity obligations regardless of physical location. All awarded parties are expected to maintain documentation, conduct internal audits, and ensure personnel are trained in cybersecurity best practices consistent with CMMC Level 2 requirements.