Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification Level 2 and NIST Special Publication 800-171 controls across all systems that process, store, or transmit Controlled Unclassified Information. Compliance with these standards is mandatory to ensure the protection of sensitive federal data and to meet Department of Defense cybersecurity requirements. The work must be performed as a subcontract under the NAICS code 541512, which corresponds to computer systems design and related services, and is tied to the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense. All security controls must be fully operational and documented to pass official CMMC assessments, with continuous monitoring and remediation expected to maintain compliance. The solicitation is open for responses until August 17, 2026, and interested parties must submit proposals through the designated DIBBS portal before the deadline.