Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)

The contract requires support to a prime contractor in achieving CMMC Level 2 self-assessment and full compliance with NIST SP 800-171 requirements, with a primary focus on developing a comprehensive System Security Plan and preparing all necessary assessment documentation for submission. This engagement is essential for ensuring the prime contractor meets federal cybersecurity standards for handling controlled unclassified information within the Department of Defense supply chain. Services will involve assessing current security controls, identifying gaps, implementing corrective actions, and documenting processes to align with the required frameworks. The work is to be performed in San Diego, California, under a subcontract arrangement tied to the NAICS code 541611 for management consulting services. The opportunity was posted on May 10, 2026, with a response deadline of May 18, 2026, indicating a short turnaround for proposal submission. The contracting office is the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense, reflecting the nature of the work supporting defense-related systems and supply chain security. While no specific set-aside designation is listed, the requirement is highly specialized and demands demonstrated expertise in cybersecurity compliance, risk management, and DoD contractual obligations.