Cybersecurity Compliance (CMMC Level 2 Assessment)

The contract seeks a CMMC Level 2 certification service through a Department of Defense-accredited Third-Party Assessment Organization to ensure full compliance with NIST SP 800-171 and DFARS cybersecurity requirements. The work is classified as a subcontract under a Total Small Business Set-Aside, meaning only small businesses are eligible to respond, and it is NAICS-coded under 541611 for Management Consulting Services. The solicitation was posted on August 5, 2026, with responses due by August 13, 2026, and the performance location is tied to Tinker Air Force Base, Oklahoma, where the cybersecurity assessment and validation activities must be conducted to meet DoD standards. The contracting activity originates from the ASC Supplier Oper AE and AF Division under the Department of Defense, indicating this effort supports Defense Supply Chain security objectives. No point of contact is listed, suggesting that all inquiries must be handled through the official DIBBS platform where the solicitation resides. The contract does not specify a fixed price or funding amount but emphasizes the necessity of obtaining official CMMC Level 2 certification, which requires thorough audits of systems, policies, and controls aligned with federal cybersecurity standards. This engagement is critical for maintaining the integrity of defense information systems and ensuring that contractors meet the baseline cybersecurity posture mandated by federal law.