Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and documentation of cybersecurity controls to achieve CMMC Level 2 compliance, ensuring alignment with DFARS 252.204-7008 and the technical standards outlined in NIST SP 800-171. This subcontract is focused on establishing robust information security practices to protect controlled unclassified information within the supply chain, with all deliverables centered on achieving and maintaining verified adherence to federal cybersecurity requirements. The work must be executed at Hill Air Force Base, Utah, with full documentation to support third-party assessments and audit readiness. This opportunity is designated as a Total Small Business Set-Aside under FAR 19.5, meaning only small business concerns are eligible to compete. The North American Industry Classification System code is 541512, indicating the scope pertains to computer systems design and related services. Responses are due by July 27, 2026, with the solicitation posted on July 19, 2026, through the DIBBS platform. The contracting office is the ASC Supplier Oper AE and AF Division under the Department of Defense, and the performance location is specifically tied to Hill AFB with the designated zip code 84056-5734.