This Government Contract opportunity from Department Of Defense was posted on July 16, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance (CMMC Level 2 Assessment and Implementation)

Closed

Federal

Submission Closed07/20/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

IT Support & Help Desk Services for Clinical UsersThe University of Mississippi Medical Center is seeking a subcontractor to provide Tier 1 and Tier 2 technical support for clinical and administrative users of the QGenda platform. The scope of work includes delivering essential help desk services such as troubleshooting, login assistance, mobile access support, and user training to ensure efficient platform utilization. This opportunity is categorized under NAICS code 541512. Interested parties must submit their responses by the deadline of August 31, 2026.

UNIV of MS MEDICAL CENTER

POSTED

DEADLINE

Cybersecurity & CMMC Compliance SupportThe Cybersecurity and CMMC Compliance Support subcontract, issued by the LSO Combat Vehicles and Armament under the Department of Defense, focuses on the implementation and maintenance of NIST SP 800-171 controls. The primary objective is to ensure systems handling covered defense information achieve and maintain CMMC Level 2 compliance. This effort falls under NAICS code 541512 and is designated as a Total Small Business Set-Aside. The solicitation was posted on August 17, 2026, with a response deadline of September 1, 2026. Interested parties must adhere to the specified timeline to provide support for these critical cybersecurity frameworks within the defense industrial base.

LSO COMBAT VEHICLES AND ARMAMENT

POSTED

DEADLINE

Cybersecurity and Covered Defense Information ManagementThis subcontract, issued by the Department of Defense ASC Commodities Division, focuses on the management of Cybersecurity and Covered Defense Information. The primary objective is the implementation of NIST SP 800-171 controls to ensure the protection of sensitive data. Key deliverables include the development of a System Security Plan and a Plan of Action and Milestones, as well as the establishment of cyber incident reporting procedures in compliance with DFARS requirements. The opportunity was posted on August 17, 2026, with a response deadline of August 26, 2026. Classified under NAICS code 541512 for computer systems design services, the contract seeks a provider capable of meeting rigorous federal cybersecurity standards to safeguard defense-related information.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Covered Defense Information (CDI) Safeguarding and Cybersecurity ComplianceThis subcontract opportunity with the Department of Defense, specifically the Maritime Supply Chain ESOC Buys, focuses on the safeguarding of Covered Defense Information. The primary objective is the implementation of NIST SP 800-171 controls to ensure full compliance with DFARS 252.204-7012 and FAR 52.204-21, which includes strict requirements for cyber incident reporting. The project falls under NAICS code 541512 and will be performed in Collegeville, Pennsylvania. Interested parties must submit their responses by August 28, 2026, following the posting date of August 17, 2026.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171) Assessment and ImplementationThis subcontract opportunity with the Department of Defense, specifically the Land Supplier Operations Vehicle Support, focuses on the implementation, documentation, and assessment of cybersecurity controls. The primary objective is to ensure the protection of Controlled Unclassified Information by adhering to NIST SP 800-171 standards and submitting the required score to the DoD Assessment Database. The project falls under NAICS code 541512 and is scheduled for performance in FPO, zip code 96322. Interested parties must respond by August 28, 2026, following the posting date of August 17, 2026.

LAND SUPPLIER OPNS VEHICLE SPT

POSTED

DEADLINE

Cybersecurity Compliance for Supplier SystemsThis subcontract opportunity, titled Cybersecurity Compliance for Supplier Systems, is issued by the Department of Defense under the Maritime Supply Chain ESOC Buys agency. The primary objective of the contract is to ensure that supplier information systems are fully compliant with DFARS 252.204-7012 and NIST SP 800-171 standards to effectively safeguard controlled unclassified information. The project falls under NAICS code 541512 and will be performed at Fort Stewart, Georgia. Interested parties must submit their responses by August 28, 2026, following the posting date of August 17, 2026.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Electronic Invoicing and Receiving Report Processing (WAWF)This subcontract, titled Electronic Invoicing and Receiving Report Processing (WAWF), is issued by the Department of Defense under the Fluid Handling Division. The primary objective of the contract is the submission of electronic invoices and receiving reports through the Wide Area Workflow (WAWF) system, specifically utilizing Invoice2in1 and IR formats to facilitate government payment processing. The project is categorized under NAICS code 541512 and will be performed at Tinker AFB, zip code 73145-8000. The solicitation was posted on August 17, 2026, with a response deadline set for August 28, 2026.

FLUID HANDLING DIVISION

POSTED

DEADLINE

Cybersecurity and CUI Safeguarding SupportThis subcontract opportunity, titled Cybersecurity and CUI Safeguarding Support, is issued by the Department of Defense Land Supply Chain. The primary objective is to provide comprehensive NIST SP 800-171 compliance services, which include performing system assessments, developing necessary documentation, and managing cyber incident reporting to ensure all DFARS requirements are met. The project falls under NAICS code 541512 and will be performed in New Cumberland, Pennsylvania. Interested parties must submit their responses by August 28, 2026, following the posting date of August 17, 2026.

POSTED

DEADLINE

Cybersecurity Compliance & Incident Reporting SupportThe Cybersecurity Compliance and Incident Reporting Support subcontract, issued by the Department of Defense for the Maritime Supply Chain, focuses on ensuring adherence to DFARS 252.204-7012 requirements. The primary scope of work involves supporting the implementation of NIST SP 800-171 standards, conducting system assessments, and managing cyber incident reporting. This opportunity falls under NAICS code 541512 and is centered in Tracy, California. Interested parties must submit their responses by August 28, 2026, following the posting date of August 17, 2026.

MARITIME SUPPLY CHAIN

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense InformationThis subcontract, titled Cybersecurity Compliance for Covered Defense Information, is issued by the Department of Defense under the Land Supplier Opns Vehicle Spt agency. The primary objective is the implementation of NIST SP 800-171 controls and DFARS 252.204-7012 requirements to ensure the protection of covered defense information. Key responsibilities include establishing system protections and maintaining rigorous cyber incident reporting protocols. The opportunity is categorized under NAICS code 541512 and was posted on August 17, 2026. Interested parties must submit their responses by the deadline of August 28, 2026. Further details and submission instructions are available through the DIBBS portal.

LAND SUPPLIER OPNS VEHICLE SPT

POSTED

DEADLINE

Cybersecurity for Covered Defense InformationThis subcontract, titled Cybersecurity for Covered Defense Information, is issued by the Department of Defense under the Maritime Supply Chain ESOC Buys agency. The primary objective of the contract is to implement and maintain necessary safeguards for covered defense information and ensure the reporting of cyber incidents in accordance with DFARS regulations. The work is categorized under NAICS code 541512 and will be performed at Fort Stewart, Georgia. The solicitation was posted on August 17, 2026, with a response deadline of August 28, 2026. Interested parties can find further details and submission guidelines through the provided DIBBS link.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171 / CMMC)This subcontract opportunity with the Defense Logistics Agency under the Department of Defense focuses on the implementation and maintenance of NIST SP 800-171 controls to safeguard Covered Defense Information. A critical component of the requirement includes adhering to cyber incident reporting protocols as specified by DFARS clauses. The work is categorized under NAICS code 541512 and will be performed at Fort Bliss, Texas. The solicitation was posted on August 17, 2026, with a response deadline of August 28, 2026. Interested parties can find further details and submission instructions through the DIBBS portal using the provided solicitation link.

Defense Logistics Agency

POSTED

about 11 hours ago

DEADLINE

in 11 days

AI Contract Overview

The contract requires the performance of a CMMC Level 2 self-assessment to ensure compliance with cybersecurity standards for handling Controlled Unclassified Information, alongside the full implementation of all NIST SP 800-171 security controls. This includes aligning systems, policies, and procedures to meet the required safeguards and documenting evidence of compliance. Coordination with a certified third-party assessment organization, or C3PAO, is mandatory to facilitate the official certification process, ensuring an unbiased validation of the implemented controls and readiness for federal contract requirements. The effort is focused on achieving and maintaining a validated CMMC Level 2 posture as a prerequisite for engaging in Department of Defense-related work. The contract is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services. It was posted on July 16, 2026, with a strict response deadline of July 20, 2026, emphasizing a rapid turnaround for qualification and mobilization. The contracting entity is the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense, though no specific place of performance or point of contact details are provided. The work is intended to support the defense supply chain’s cybersecurity posture, requiring the contractor to demonstrate not only technical implementation but also procedural rigor and audit readiness through formal certification.

General Info

CMMC Level 2 self-assessment and full NIST 800-171 implementation required for DoD contract certification.

Agency

Department Of Defense → ASC SUPPLIER OPER AE AND AF DIVView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

USA

Set-Aside

NONE

Documents

This scope was carved out of SPE4A7-26-Q-0841.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

PIN, STRAIGHT, HEADLE

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PhaseClosed

PostedJul 16

subcontract

Response DeadlineJul 20

Deadline has passed

Submission Closed

07/20/2026, 05:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → ASC SUPPLIER OPER AE AND AF DIV

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → ASC SUPPLIER OPER AE AND AF DIV

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Perform CMMC Level 2 self-assessment, implement NIST SP 800-171 controls, and coordinate third-party certification via C3PAO for handling Controlled Unclassified Information.