Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires comprehensive cybersecurity compliance support aligned with CMMC Level 2 requirements and NIST SP 800-171 standards, focusing on organizations handling covered defense information. Key deliverables include conducting thorough assessments of current security controls, developing a detailed System Security Plan that documents policies and procedures for safeguarding sensitive data, and preparing a Plan of Action and Milestones to address identified gaps and remediate non-compliant practices. The effort is structured to ensure the contractor meets the Department of Defense’s cybersecurity framework for protecting controlled unclassified information within its supply chain. The solicitation is issued as a subcontract under the Strategic AcQ Program Directorate, with a NAICS code of 541512 indicating it pertains to computer systems design services. The posting date is August 2, 2026, and responses must be submitted by August 17, 2026. There is no specified set-aside designation, and the place of performance is not geographically defined, suggesting work may be performed remotely or at various contractor locations. All activities must align with federal cybersecurity mandates and be executed in a manner that satisfies DOD audit and compliance expectations without reliance on external documentation or references.