Cybersecurity Compliance (CMMC Level 2 Self-Assessment & Implementation)

The contract requires the implementation and assessment of CMMC Level 2 cybersecurity controls to protect covered defense information, with a primary focus on achieving compliance with NIST SP 800-171 standards. This includes developing, documenting, and validating security practices across all applicable domains, ensuring that systems and processes meet the required baseline for safeguarding sensitive government data. The contractor must complete a thorough self-assessment, compile supporting documentation, and demonstrate readiness for potential third-party verification, all while maintaining ongoing operational security posture consistent with CMMC requirements. Performance is to be conducted at Tinker Air Force Base with a zip code of 73145-8000, and the work is classified as a subcontract under NAICS code 541512 for other computer related services. The solicitation was posted on July 27, 2026, with proposals due by August 4, 2026, and is issued by the Department of Defense through ASC PUBLIC MFR. The contractor must align all activities with federal defense cybersecurity mandates, ensuring that control implementation is not only technically sound but also well-documented and traceable to regulatory expectations.