Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)

The contract requires the implementation and thorough documentation of cybersecurity controls to achieve compliance with CMMC Level 2 and NIST SP 800-171 standards, with a focus on preparing for and successfully passing an official audit. The work entails aligning existing systems, policies, and procedures with the required security practices, ensuring all controls are not only applied but also demonstrably maintained and recorded to meet federal defense cybersecurity expectations. The effort must cover the full scope of safeguarding controlled unclassified information within the contractor’s environment, including access control, incident response, system monitoring, and personnel security measures. The contract is a subcontract under the Department of Defense’s ASC Commodities Division, with performance specifically tied to the location at Cherry Point, North Carolina, zip code 28533-5040. It falls under NAICS code 541512 for computer systems design services and was posted on July 21, 2026, with responses due by July 29, 2026. The work is critical to sustaining defense contract eligibility and must be executed within the specified timeframe to ensure readiness for audit and compliance verification. All deliverables must be well-documented and structured to withstand rigorous federal assessment.