Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract seeks a small business subcontractor to provide support to a prime contractor in preparing for or conducting a CMMC Level 2 self-assessment, with a focus on developing necessary documentation, creating a system security plan, and implementing required cybersecurity practices. The work is tied to compliance with the Cybersecurity Maturity Model Certification framework at Level 2, which involves meeting a defined set of security controls to protect controlled unclassified information within defense systems. The subcontract is part of a total small business set-aside under SBA regulations, ensuring eligibility and participation exclusively by small businesses, and is classified under NAICS code 541512 for computer systems design services. Performance of the required tasks will be conducted at Tinker Air Force Base with a zip code of 73145-8000, and the offering was posted on July 16, 2026, with a response deadline set for July 27, 2026. The contracting activity is under the Department of Defense's Fluid Handling Division, and the effort is specifically aimed at enabling the prime contractor to achieve and demonstrate compliance readiness for CMMC Level 2 requirements. No point of contact details are provided in the solicitation, and all proposals must be submitted through the designated DIBBS platform link before the deadline to be considered.