Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract involves the implementation and ongoing maintenance of cybersecurity controls to achieve compliance with CMMC Level 2 standards, requiring the contractor to establish, document, and operationalize the necessary technical and administrative safeguards aligned with the Cybersecurity Maturity Model Certification framework. This includes conducting a thorough self-assessment to evaluate current posture gaps and preparing comprehensive documentation and evidence to demonstrate readiness for an official assessment by a Certified Third-Party Assessment Organization. The work must be performed at Tinker Air Force Base, with all activities centered on securing controlled unclassified information within the defense supply chain. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is managed by the Department of Defense through the Land Supply Chain organization. Responses are due by August 21, 2026, following a posted solicitation date of August 10, 2026. The successful contractor will be expected to maintain continuous compliance, adapt to evolving cyber threats, and ensure all controls remain effective through regular monitoring and updates. Failure to meet CMMC Level 2 requirements may result in non-compliance penalties and loss of eligibility for future defense contracting opportunities.