Cybersecurity Compliance (CMMC Level 2)

The contract requires comprehensive support to achieve CMMC Level 2 compliance for systems handling covered defense information, focusing on the full lifecycle of cybersecurity readiness. This includes conducting a detailed self-assessment against the NIST SP 800-171 controls, developing a robust System Security Plan that documents policies and procedures, and fully implementing all required security controls to meet the mandated standard. The work is critical to ensuring the protection of sensitive information in alignment with Department of Defense cybersecurity expectations and involves a thorough gap analysis, control remediation, and documentation refinement to pass a formal CMMC assessment. The subcontract is associated with the FLUID HANDLING DIVISION under the Department of Defense, with performance expected at Tinker Air Force Base, Oklahoma, 73145-8000. It falls under NAICS code 541512, indicating it relates to computer systems design and related services. The solicitation was posted on June 25, 2026, with a firm response deadline of July 6, 2026, requiring timely submission of proposals demonstrating expertise in CMMC readiness, experience with NIST SP 800-171, and a clear methodology for executing compliance activities. Successful bidders must be prepared to deliver actionable, auditable outcomes that validate compliance without dependency on third-party certification at this stage.