Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

This contract supports CMMC Level 2 self-assessment activities for organizations handling covered defense information, requiring comprehensive gap analysis, documentation development, and implementation of NIST SP 800-171 security controls. The effort is focused on ensuring compliance with federal cybersecurity standards by identifying deficiencies, creating necessary policies and procedures, and deploying technical and administrative safeguards aligned with NIST guidelines. The subcontract is set aside exclusively for small businesses under the SBA’s Total Small Business Set-Aside program, with the NAICS code 541512 indicating it falls under computer systems design services. The solicitation is managed by the Department of Defense’s Strategic Acquisition Program Directorate and is open for responses until July 30, 2026, with an initial posting date of July 15, 2026. Performance of the work is not tied to a specific geographic location, allowing flexibility for remote or distributed support. The contract is structured as a subcontract, indicating it will be awarded to a small business that will support a prime contractor or larger program effort within the defense acquisition ecosystem, with the overarching goal of achieving and maintaining CMMC Level 2 compliance through structured, auditable cybersecurity practices.