Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to achieve Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, with the primary objective of safeguarding Controlled Unclassified Information. This effort demands a systematic approach to aligning organizational policies, technical safeguards, and operational procedures with the specific requirements outlined in the NIST framework to ensure proper protection of sensitive data. All activities must be fully documented to demonstrate compliance during third-party assessments, including evidence of access controls, audit capabilities, incident response, and system maintenance practices. The work is being conducted as a subcontract under the Department of Defense, specifically for LSO Combat Vehicles and Armament, with performance slated to occur in Sumner, Washington, at the zip code 98390-0000. The North American Industry Classification System code 541512 indicates the scope involves computer systems design and related services, suggesting the contractor will provide specialized cybersecurity consulting and implementation expertise. Responses must be submitted by August 3, 2026, and the solicitation is open to qualified entities capable of delivering full-scope CMMC Level 2 readiness, including gap analysis, control execution, documentation, and audit preparation services.