Cybersecurity Compliance (CMMC Level 2 Support)

The contract focuses on providing support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2, specifically targeting self-assessment activities aligned with compliance to NIST SP 800-171 standards. Key services include the development of the System Security Plan (SSP) and preparation for audits to ensure readiness for handling Covered Defense Information (CDI). The objective is to assist the Department of Defense's Aviation Supply Chain division in enhancing its cybersecurity posture to meet federally mandated defense information security requirements. This subcontract opportunity, classified under NAICS code 541512, was posted on May 19, 2026, with a response deadline of May 27, 2026. Work is to be performed at the Cherry Point location in North Carolina (zip code 28533-5040). The contract supports efforts to maintain compliance with defense regulations by strengthening organizational controls and documentation, thereby enabling the agency to mitigate cybersecurity risks and demonstrate adherence to required standards in preparation for official inspections or audits.