Cybersecurity Compliance (CMMC Level 2) Implementation

The contract seeks the implementation and assessment of NIST SP 800-171 controls to achieve CMMC Level 2 compliance for systems that handle Controlled Unclassified Information. The work involves aligning existing cybersecurity practices with the required security controls outlined in NIST SP 800-171, conducting a thorough assessment to validate compliance, and preparing for official CMMC certification under the Department of Defense’s Cybersecurity Maturity Model Certification program. All activities must be completed in accordance with federal cybersecurity standards and are focused on ensuring the protection of sensitive data within the performance location in Bremerton, Washington, with a zip code of 98314-6001. This subcontract is categorized under NAICS code 541512, which corresponds to Computer Systems Design Services, indicating a focus on technical implementation and advisory services. The solicitation was posted on July 15, 2026, and responses are due by July 27, 2026. The contracting entity is the Department of Defense, operating through the Puget Sound affiliation, and the work will be performed at a specified location in Bremerton. While no set-aside information is provided, the requirement is time-sensitive and demands expert cybersecurity implementation, documentation, and assessment capabilities to meet federal compliance mandates.