Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)

The contract requires the implementation of NIST SP 800-171 cybersecurity controls and the achievement of CMMC Level 2 certification through engagement with an accredited C3PAO. This includes comprehensive system hardening, strict access control measures, and full audit readiness to ensure compliance with federal cybersecurity standards for handling controlled unclassified information. The work demands a systematic approach to securing information systems, documenting policies and procedures, and maintaining continuous readiness for third-party assessment. This is a small business set-aside subcontract under the NAICS code 541512, issued by the Department of Defense under the LAND SUPPLIER OPNS VEHICLE SPT organization. The solicitation is open with a response deadline of August 5, 2026, and is intended for qualified small businesses fully capable of delivering end-to-end cybersecurity compliance services. Performance location details are not specified, but successful offerors must demonstrate the capacity to operate under federal cybersecurity requirements and coordinate directly with certified third-party assessors to validate adherence to CMMC Level 2 criteria.