Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract seeks support for achieving CMMC Level 2 compliance through a self-assessment process that aligns with NIST SP 800-171 requirements. This includes comprehensive documentation of security controls, system hardening to meet federal cybersecurity standards, and preparation for third-party audits to verify compliance. The work is structured to ensure the contractor can demonstrate full adherence to the security practices outlined in the NIST framework, covering areas such as access control, audit and accountability, configuration management, and incident response. The subcontractor is expected to deliver actionable outputs that enable the prime contractor to pass a CMMC Level 2 assessment without external evaluation during the initial self-certification phase. The solicitation was posted on July 29, 2026, with a response deadline of August 10, 2026, and is classified as a subcontract under NAICS code 541512 for computer systems design services. The contracting activity falls under the Department of Defense through the Land Supply Chain organization, with performance expected in support of defense-related supply chain cybersecurity objectives. While no specific location is designated for performance, the work must be executed to satisfy Department of Defense compliance mandates, and all deliverables must be completed and submitted by the deadline to remain eligible for award.