Cybersecurity Compliance (CMMC Level 2) Implementation

The contract requires the implementation and self-certification of CMMC Level 2 compliance, encompassing full adherence to NIST SP 800-171 security controls, the development of a comprehensive System Security Plan, and the establishment of robust incident reporting procedures. This effort is geared toward ensuring that all cybersecurity safeguards are effectively integrated into the contractor’s operational environment to protect controlled unclassified information. The work must be completed in accordance with federal cybersecurity standards and validated through self-certification without the need for third-party assessment. This is a total small business set-aside subcontract under NAICS code 541512, issued by the Department of Defense’s Active Devices Division with performance to occur at Hill AFB, Utah, 84056-5734. The solicitation was posted on July 19, 2026, and responses are due by July 30, 2026. The contract is structured to support defense-related cybersecurity readiness and is accessible exclusively to small businesses as defined by SBA regulations. All work must align strictly with CMMC Level 2 requirements and be delivered within the specified timeframe and location.