Cybersecurity Compliance (CMMC Level 2) Implementation

This contract seeks to secure a subcontractor to support the implementation of CMMC Level 2 cybersecurity compliance, with a focus on conducting a self-assessment, developing a comprehensive System Security Plan, and ensuring full alignment with NIST SP 800-171 and DFARS 252.204-7012 requirements. The effort is designed to establish and document robust security controls necessary to protect controlled unclassified information within federal supply chains, with all activities tied directly to meeting CMMC Level 2 standards. The prime contractor or organization must demonstrate expertise in cybersecurity frameworks and compliance processes specific to Department of Defense contractual obligations. The opportunity is designated as a Total Small Business Set-Aside under FAR 19.5, meaning only small businesses are eligible to respond, and it is classified under NAICS code 541611 for Management Consulting Services. The solicitation was posted on July 22, 2026, with responses due by August 3, 2026. Performance will be centered in Albany, Georgia, with the contracting office operating under the Department of Defense through the Albany Transportation Officer. All work must be delivered by the deadline to qualify for award, and the subcontractor is expected to provide detailed documentation and evidence of compliance throughout the engagement.