Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and ongoing maintenance of CMMC Level 2 cybersecurity controls across systems handling Covered Defense Information, ensuring full alignment with the Defense Federal Acquisition Regulation Supplement and the Cybersecurity Maturity Model Certification framework. All technical, administrative, and physical safeguards mandated under CMMC Level 2 must be rigorously applied, documented, and operational to achieve and sustain audit readiness for assessment by a Certified Third-Party Assessment Organization. The scope encompasses comprehensive documentation of policies, procedures, and control adherence to support a successful C3PAO evaluation and subsequent certification. Performance is tied to Tinker Air Force Base with a ZIP code of 73145-8000, and the work is structured as a subcontract under the NAICS code 541611 for Management Consulting Services. The solicitation was posted July 27, 2026, with responses due by August 11, 2026, and is managed by the Department of Defense under the Maritime Supply Chain organization. Successful performers must demonstrate proven experience in CMMC compliance projects, possess the technical capability to integrate controls into existing IT environments, and maintain continuous compliance throughout the contract period to meet federal defense cybersecurity requirements.