Top

Cybersecurity Compliance (CMMC Level 2) Implementation

Active

Federal

Response Deadline08/17/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → AVIATION SUPPLY CHAIN ESOC BUYSView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 9

subcontract

Response DeadlineAug 17

Submission deadline

Response Deadline

08/17/2026, 05:00:00 PM UTCin 8 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Defense → AVIATION SUPPLY CHAIN ESOC BUYS

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → AVIATION SUPPLY CHAIN ESOC BUYS

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Support CMMC Level 2 self-assessment and compliance for systems handling covered defense information, including SSP development and system hardening.

Similar Contracts

Same NAICS industry code

NAICS: 541512

New

DIBBS

Cybersecurity and CMMC Compliance Support

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information within contractor systems that handle classified or sensitive contract data. This effort is mandatory for ensuring compliance with federal cybersecurity standards applicable to defense contractors and involves a full assessment and record-keeping of all required security controls across systems processing protected information. The work must be completed in alignment with the NIST framework and demonstrated through formal documentation to meet contractual obligations. The contract is classified as a subcontract under the NAICS code 541512, associated with computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense with performance required in Tracy, California, 95304-5000. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a tight turnaround for submission. Although no set-aside type is specified, the contract is governed by DoD cybersecurity regulations and demands strict adherence to NIST guidelines to protect national defense information, making compliance non-negotiable for award consideration.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance and CMMC Assessment Support

LSO COMBAT VEHICLES AND ARMAMENT

POSTED

DEADLINE

Cybersecurity Compliance & NIST 800-171 AssessmentThe contract requires the performance of NIST SP 800-171 cybersecurity assessments to ensure systems handling Covered Defense Information meet federal security requirements. The effort focuses on evaluating compliance with the specified framework, identifying gaps, and implementing necessary safeguards to protect sensitive data. All assessment outcomes must be documented and submitted through the Supplier Performance Risk System to validate adherence to contractual and regulatory obligations. The work is tied to a subcontract under the Department of Defense and is to be performed at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026, under the NAICS code 541512, indicating it pertains to computer systems design services. There is no set-aside designation specified, and the contract does not include a designated point of contact within the provided details.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Electronic Invoice and Payment Processing (WAWF Support)

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance and Reporting (Subcontractor Support)This contract requires subcontractor support to ensure compliance with NIST SP 800-171 standards for protecting covered defense information, while also mandating timely reporting of any cyber incidents in accordance with DFARS 252.204-7012. The work involves implementing and maintaining security controls aligned with federal cybersecurity requirements to safeguard sensitive data handled by the subcontractor on behalf of the Department of Defense. Performance is expected to be conducted at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response submission set for August 17, 2026. The solicitation falls under NAICS code 541512, indicating it is focused on computer systems design services, and is issued under the ASC SUPPLIER OPER OEM DIVISION, with no set-aside classification specified. The subcontractor must be prepared to demonstrate robust cybersecurity practices and incident response capabilities to meet defense contractual obligations.

ASC SUPPLIER OPER OEM DIVISION

POSTED

DEADLINE

Cybersecurity and CMMC Assessment SupportThe contract seeks to provide specialized support to a prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, specifically focused on the safeguarding of Controlled Unclassified Information (CUI). The effort involves assisting the prime contractor with implementing required security controls, conducting gap assessments, preparing documentation, and ensuring adherence to CMMC framework standards to meet Department of Defense cybersecurity requirements. The work is aligned with NAICS code 541512, indicating it falls under computer systems design and related services, and is structured as a subcontract to support broader defense contracting obligations. This subcontract is tied to performance at Hill Air Force Base with ZIP code 84056-5734 and was posted on August 9, 2026, with a response deadline of August 17, 2026. The acquiring agency is the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is part of a broader defense supply chain modernization and cybersecurity enhancement initiative. The subcontractor must possess demonstrated expertise in CMMC Level 2 implementation, knowledge of NIST SP 800-171 controls, and experience working within defense contracting environments to ensure the prime contractor meets all assessment and certification prerequisites within the established timeline.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity Incident Reporting & NIST SP 800-171 ComplianceThe contract requires the implementation and assessment of cybersecurity controls aligned with NIST SP 800-171 to secure systems that handle Controlled Unclassified Information, ensuring compliance with federal standards for protecting sensitive but unclassified data. The work is positioned as a subcontract under the Department of Defense, specifically for the Medical Supply Chain MD Surg FSF, with performance focused at Williamsburg, Virginia, 23185-5830. The contractor must establish, validate, and sustain cybersecurity measures that meet the NIST guidelines, including regular evaluations to confirm adherence, incident detection, and reporting protocols for any breaches or vulnerabilities affecting CUI. The solicitation closes on August 17, 2026, and the NAICS code 541512 indicates the scope involves custom computer programming services tailored to cybersecurity objectives, suggesting the need for specialized technical expertise in configuring, auditing, and maintaining compliant systems.

MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

POSTED

DEADLINE

More opportunities from Department Of Defense → AVIATION SUPPLY CHAIN ESOC BUYS

Same awarding agency

NAICS: 332722

New

DIBBS

Precision Machined Component Supply – Machine Thread Plug

Bolt, Nut, Screw, Rivet, and Washer Manufacturing

POSTED

DEADLINE

Hazardous Materials Disclosure and SDS ManagementThe contract pertains to the identification and reporting of hazardous materials utilized in manufacturing or preservation processes, with a primary focus on preparing and submitting Safety Data Sheets compliant with OSHA’s 29 CFR 1910.1200 regulations. The successful offeror will be responsible for ensuring all hazardous substances are accurately documented, classified, and disclosed according to federal safety standards, enabling proper handling, storage, and emergency response protocols. This includes maintaining up-to-date SDS documentation for every hazardous chemical involved and ensuring alignment with current regulatory requirements. This is a subcontract under NAICS code 541620, issued by the Department of Defense through the AVIATION SUPPLY CHAIN ESOC BUYS organization. The place of performance is specified as Jacksonville, FL, with a zip code of 32226-3404. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026. The contract is managed through the DIBBS system, and the contractor must deliver full compliance with OSHA’s hazardous communication standard, with particular attention to detail in SDS preparation and submission to meet the Department of Defense’s supply chain safety obligations.

Environmental Consulting Services

POSTED

DEADLINE

Military Marking and Barcoding ServicesThe contract requires the application of MIL-STD-129 compliant markings and labels on all levels of military packaging including unit, intermediate, and exterior containers, ensuring full adherence to Department of Defense standards for shipment and storage. Durable barcode labeling must be implemented across all container types to enable accurate tracking, inventory management, and logistical handling throughout the supply chain, with emphasis on longevity and readability under operational conditions. The work must align strictly with military specifications to support seamless integration into existing defense logistics systems. This subcontract is issued under NAICS code 811411 by the Aviation Supply Chain ESOC Buys within the Department of Defense, with performance required at a specified location in Jacksonville, Florida, ZIP code 32226-3404. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026, with no set-aside provisions indicated. All parties must ensure compliance with labeling standards, use approved materials and methods, and deliver work that meets the rigorous durability and precision expectations of military logistics operations.

Home and Garden Equipment Repair and Maintenance

POSTED

DEADLINE

Military-Compliant Packaging and PreservationThe contract requires the packaging, preservation, and palletization of tapered bushings in strict compliance with MIL-STD-2073-1E and DLA RP001 standards, specifically employing cold/dry preservation method 33 to ensure long-term protection against environmental degradation. Unit containment must utilize the BV method, and intermediate packaging must conform to the E5 specification, ensuring each component is secured and protected during handling, storage, and transit. All work must be performed at the designated place of performance in Jacksonville, Florida, with a zip code of 32226-3404, and the contract is classified as a subcontract under NAICS code 493190, indicating it falls within the warehousing and storage industry sector. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, and is managed by the Aviation Supply Chain ESOC Buys under the Department of Defense, requiring strict adherence to federal military logistics and preservation protocols.

Other Warehousing and Storage

POSTED

DEADLINE

Precision Machined Tapered Bushing ManufacturingThe contract calls for the precision manufacturing of a tapered bushing with NSN 5365015005183, ensuring full compliance with military specifications that govern material composition, dimensional tolerances, surface finish, and rigorous quality testing protocols. The production must meet exacting standards for performance and durability under demanding operational conditions, with all components subject to stringent inspection and verification processes to guarantee conformity and reliability. The opportunity is structured as a subcontract under the NAICS code 332999, with a response deadline of August 17, 2026, and is posted by the Aviation Supply Chain ESOC Buys division of the Department of Defense. Performance of the work is required to be conducted at a location in Jacksonville, Florida, with the zip code 32226-3404. The solicitation is open to qualified manufacturers capable of delivering high-precision aerospace components that adhere to federal defense standards, though no specific set-aside criteria or point of contact are provided. The full details and submission instructions are accessible via the DIBBS portal.

All Other Miscellaneous Fabricated Metal Product Manufacturing

POSTED

DEADLINE

Cybersecurity Compliance & CUI SafeguardingThe contract requires implementation and maintenance of cybersecurity controls to ensure full compliance with DFARS 252.204-7012 and NIST SP 800-171 standards, specifically to safeguard Controlled Unclassified Information (CUI) on systems supporting the prime contractor. All subcontractor systems handling CUI must meet these federal requirements, including robust access controls, audit logging, media protection, incident response, and regular system assessments to prevent unauthorized access or data loss. Compliance is mandatory and ongoing throughout the contract lifecycle, with continuous monitoring and documentation to demonstrate adherence. This subcontract is issued under the NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Aviation Supply Chain ESOC Buys office. The place of performance is designated as FPO, 96632, indicating operations may occur in deployed or overseas contexts. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026. Bidders must demonstrate proven ability to meet CUI protection requirements, maintain secure systems, and provide evidence of compliance readiness, as failure to meet these standards may result in contract termination or loss of eligibility for future DoD work.

Computer Systems Design Services

POSTED

DEADLINE

Radioactive or Special Materials Packaging & Transportation ComplianceThe contract requires full compliance with Department of Transportation and Nuclear Regulatory Commission regulations for the packaging, labeling, and documentation of structural supports containing radioactive or special handling materials, with strict adherence to military shipping protocols. All activities must ensure the safe and lawful transportation of hazardous goods through specialized packaging solutions that meet federal safety and security standards, including proper identification, containment, and chain-of-custody documentation throughout transit. The work is to be performed under a subcontract arrangement with a performance location identified as FPO ZIP 96632, aligning with Department of Defense supply chain requirements under NAICS code 488999 for other support activities related to transportation. Proposals must be submitted by the deadline of August 17, 2026, with the solicitation posted on August 9, 2026, through the DIBBS system under the Aviation Supply Chain ESOC Buys office. No set-aside designation is specified, and the contract is open to qualified subcontractors capable of handling regulated materials with full regulatory oversight. Compliance is non-negotiable, requiring demonstrated expertise in both civilian and military hazardous materials transport, accurate recordkeeping, and adherence to all applicable federal, state, and defense-specific directives governing the movement of sensitive and dangerous cargo.

All Other Support Activities for Transportation

POSTED

DEADLINE

Hazardous Materials Compliance & Safety Data Sheet (SDS) ManagementThe contract entails providing comprehensive regulatory compliance services focused on hazardous materials within the context of manufacturing or handling structural supports. Key deliverables include authoring Safety Data Sheets (SDS) in full alignment with global and U.S. standards, developing and maintaining employee training documentation to ensure workforce competency, and implementing OSHA-compliant labeling systems to accurately communicate chemical hazards. These services must be executed under strict regulatory frameworks to safeguard personnel, maintain operational compliance, and support the safe lifecycle management of hazardous substances used in defense-related production activities. This subcontract, solicited under the NAICS code 541690 for other professional, scientific, and technical services, is issued by the Department of Defense through the AVIATION SUPPLY CHAIN ESOC BUYS office. The place of performance is designated as FPO with a ZIP code of 96632, indicating operations may involve overseas or mobile military logistics environments. The solicitation was posted on August 9, 2026, with a firm deadline for responses on August 17, 2026, requiring timely submission of compliance plans, technical capabilities, and demonstrated experience in hazardous materials management within defense or aerospace supply chains. All work must adhere to federal safety regulations and be fully documentable for audit and inspection purposes.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Aerospace Structural Support Component SupplyThe contract calls for the supply of four structural support components identified by NSN 1560-01-650-4509, specifically for use on U.S. Navy vessels, with strict adherence to MIL-STD-129 standards for packaging and labeling to ensure compatibility with military logistics systems. Delivery of all components must be completed within five days of order issuance to support timely deployment schedules, reflecting the urgent operational nature of the requirement. The components are classified under NAICS code 336413, indicating they relate to aerospace product and part manufacturing, and are procured under a subcontract arrangement by the Aviation Supply Chain ESOC Buys division within the Department of Defense. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, and the place of performance is designated as FPO with ZIP code 96632, a common designation for military mail addressed to fleet units. The contract is part of a broader defense supply initiative managed through the DLA’s DIBBS platform, and compliance with all technical and logistical specifications is mandatory to meet deployment timelines and operational readiness standards. No specific set-aside or small business preference is indicated, and the procurement is directed toward qualified suppliers capable of rapid fulfillment under exacting military standards.

Other Aircraft Parts and Auxiliary Equipment Manufacturing

POSTED

DEADLINE

Hazardous Materials and Safety Data Management

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Inspection and Quality Assurance at Origin

POSTED

DEADLINE

Defense-Compliant Packaging and Marking Services

Packaging and Labeling Services

POSTED

about 9 hours ago

DEADLINE

in 8 days

View Details