Cybersecurity Compliance (CMMC Level 2 Assessment and Maintenance)

The contract requires the performance or support of CMMC Level 2 certification to ensure compliance with NIST SP 800-171 standards for safeguarding Covered Defense Information. This includes conducting a thorough system assessment to evaluate security controls, addressing any gaps in compliance, and submitting accurate SPRS reporting to document the organization's cybersecurity posture. The work is focused on achieving and maintaining certification under the Cybersecurity Maturity Model Certification framework, which is mandatory for contractors handling federal contract information and controlled unclassified information within the Department of Defense supply chain. The effort must align with all technical and procedural requirements set forth by the CMMC program to ensure continuous compliance and readiness for audits. This is a subcontract opportunity under the NAICS code 541512, which corresponds to computer systems design and related services. The solicitation was posted on July 28, 2026, with a response deadline of August 10, 2026. The contracting activity is linked to the Department of Defense through the LAND SUPPLY CHAIN organization, indicating that the work supports defense supply chain cybersecurity objectives. While specific performance locations and point of contact details are not provided, all activities must be conducted in a manner that meets federal cybersecurity standards and enables the prime contractor to maintain CMMC Level 2 certification status. Failure to meet compliance requirements may result in loss of eligibility for future DoD contracts.