Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls to achieve compliance with CMMC Level 2 and NIST SP 800-171 standards for safeguarding Controlled Unclassified Information within contractor systems. The work involves establishing and validating technical, administrative, and physical safeguards to ensure robust protection of sensitive data as mandated by Department of Defense requirements. Performance of the contract will be carried out at Robins Air Force Base, Georgia, with all cybersecurity measures tailored to meet the specific framework and scoring criteria of CMMC Level 2 while aligning with the 110 security controls outlined in NIST SP 800-171. This is a subcontract under the NAICS code 541512, which pertains to computer systems design services, and is managed by the Fluid Handling Division of the Department of Defense. The solicitation was posted on July 5, 2026, with a response deadline of July 16, 2026, indicating a tight turn-around for submissions. Contractors must demonstrate proven experience in deploying and assessing cybersecurity frameworks for federal contractors, with the ability to provide evidence of compliance through documentation, audits, and third-party evaluations. Successful candidates will be expected to maintain ongoing compliance and support continuous monitoring activities to ensure sustained adherence to the required standards throughout the contract period.