Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls to achieve compliance with NIST SP 800-171 and CMMC Level 2 standards, focusing on the development of a System Security Plan and Plan of Action and Milestones, along with a third-party assessment to validate adherence. The effort is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, and is aligned with NAICS code 541512 for computer systems design services. The work must be completed in accordance with federal cybersecurity mandates to ensure the protection of controlled unclassified information within the supply chain. Solicitation details indicate the opportunity was posted on July 31, 2026, with responses due by August 10, 2026, providing a brief ten-day window for interested parties to submit proposals. Although specific performance locations and point of contact information are not provided, the requirement is clearly scoped to deliver a validated cybersecurity posture that meets CMMC Level 2 criteria through documented processes, remediation tracking, and independent evaluation. The subcontract nature suggests the work supports a larger DoD acquisition initiative requiring robust cybersecurity governance and documentation.