Cybersecurity Compliance (CMMC Level 2) and NIST SP 800-171 Assessment

The contract requires the implementation and assessment of cybersecurity controls to achieve compliance with CMMC Level 2 and NIST SP 800-171 standards for the handling of Controlled Unclassified Information. This effort is critical for ensuring that systems and processes meet the Department of Defense’s mandated security requirements to protect sensitive data. The work involves a comprehensive evaluation of existing security posture, deployment of necessary technical and procedural controls, and documentation to demonstrate adherence to the specified frameworks. Assessment activities will include gap analyses, control verification, and reporting to confirm full compliance. Performance of this subcontract is designated for Hill Air Force Base, Utah, with a response deadline of August 3, 2026. The North American Industry Classification System code 541512 indicates the focus is on computer systems design services, aligning with the technical nature of the cybersecurity implementation and assessment tasks. The contracting activity falls under the Active Devices Division of the Department of Defense, and the subcontractor must be prepared to operate under the strict compliance and reporting protocols required for CUI protection. Failure to meet the CMMC Level 2 requirements could result in non-compliance penalties or termination of eligibility for future DoD contracts.