Cybersecurity Compliance (CMMC Level 2)

This contract requires support for achieving CMMC Level 2 compliance through the implementation of NIST SP 800-171 security controls on systems that handle covered defense information. The work involves comprehensive documentation of security practices, configuration management, access controls, audit logging, and other requirements necessary to meet the cybersecurity standards outlined in the CMMC framework. The goal is to ensure the contractor’s systems are fully audit-ready and capable of withstanding third-party assessments to validate compliance with federal cybersecurity mandates for defense contractors. The contract is a subcontract tied to the Department of Defense and is performance-focused at Fort Wainwright, Alaska, with a zip code of 99703-7000. The solicitation, identified under NAICS code 541512 for Computer Systems Design Services, is open for responses until August 10, 2026, with a posted date of July 29, 2026. No specific set-aside criteria are indicated, and the point of contact details are not provided in the available data. All work must be completed in alignment with DOD cybersecurity expectations and must demonstrate verifiable adherence to the NIST 800-171 controls as mandated for CMMC Level 2 certification.