Cybersecurity Compliance (CMMC Level 2 Support)

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance within the Department of Defense’s Aviation Supply Chain ecosystem, focusing on executing a self-assessment, developing necessary cybersecurity policies and procedures, and preparing comprehensive documentation to demonstrate readiness for audit. Work will center on aligning organizational practices with CMMC Level 2 requirements, ensuring all controls related to safeguarding controlled unclassified information are properly implemented, recorded, and verifiable. The effort includes gap analysis, policy drafting, employee training materials, and procedural documentation necessary to pass a formal CMMC assessment. Performance is required at Robins Air Force Base, Georgia, with a submission deadline of August 13, 2026, and the solicitation posted on August 5, 2026. This is a subcontract under NAICS code 541611, which covers management consulting services, indicating that the primary deliverables are advisory, compliance, and administrative in nature. The effort is critical for contractors handling DoD information systems and must be completed to maintain eligibility for future defense contracts requiring CMMC Level 2 certification. All activities must strictly adhere to DoD cybersecurity standards and be documented in a manner that withstands third-party audit scrutiny.