Cybersecurity Compliance (CMMC Level 2) Implementation

The contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls for systems handling covered defense information, ensuring full alignment with NIST Special Publication 800-171 standards. The work focuses on achieving audit readiness through comprehensive security practices that protect sensitive data, including access controls, asset management, incident response, and continuous monitoring. The effort is specifically targeted at defense systems under the Department of Defense and must meet the strict compliance requirements necessary to support defense contracting operations. The performance location is designated as the Detroit Arsenal with a zip code of 48397-5000, and the contract is structured as a subcontract under NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 19, 2026, and responses are due by July 30, 2026, with all deliverables tied to the achievement and sustenance of CMMC Level 2 certification. The contractor must demonstrate not only initial compliance but also a sustained program for updating and validating controls in response to evolving threats and regulatory changes, ensuring uninterrupted eligibility to handle covered defense information within the DoD supply chain.