Cybersecurity Compliance (CMMC Level 2) and CUI Protection

The contract requires implementation and maintenance of CMMC Level 2 cybersecurity controls to safeguard Controlled Unclassified Information across all systems handling contract-related data, with associated documentation and a SPARS self-assessment to demonstrate compliance. The work must be performed in New Orleans, Louisiana, and is subject to strict regulatory standards designed to ensure the integrity, confidentiality, and availability of sensitive unclassified information managed under Department of Defense contracts. The subcontractor must possess the technical capability and processes to meet all CMMC Level 2 requirements, including access controls, audit logging, incident response, and system monitoring, while maintaining continuous compliance throughout the contract term. This is a total small business set-aside under the SBA program, identified by NAICS code 541512 for computer systems design services, and is intended exclusively for small business concerns. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, and is administered by the Department of Defense under the contract title Cybersecurity Compliance (CMMC Level 2) and CUI Protection. The place of performance is specified as ZIP code 70143-5000 in New Orleans, and the work may involve coordination with government systems and infrastructure to ensure alignment with DoD cybersecurity frameworks. Eligible offerors must demonstrate proven experience in CMMC implementation, CUI handling procedures, and the ability to complete and submit a compliant SPARS self-assessment.