Cybersecurity Compliance (CMMC Level 2 Assessment & Maintenance)

The contract supports achieving and maintaining CMMC Level 2 certification through comprehensive cybersecurity compliance services, including the development of a system security plan and full alignment with NIST SP 800-171 requirements. This entails implementing and documenting security controls necessary to protect controlled unclassified information, ensuring all processes and infrastructure meet the mandatory standards for certification. The contractor will also facilitate and coordinate with a third-party assessment organization to validate compliance, addressing any gaps identified during the evaluation process to secure and sustain certification. Efforts under this subcontract are focused on the Department of Defense’s Fluid Handling Division, with performance centered in Grand Ledge, Michigan, 48837. The work is classified under NAICS code 541512, indicating it falls within computer systems design and related services, and is structured as a subcontract opportunity posted on August 3, 2026. Proposals must be submitted no later than August 14, 2026, and the contract aims to establish a sustainable cybersecurity posture that remains in compliance through ongoing monitoring, documentation updates, and readiness for re-assessments.