Cybersecurity Compliance (CMMC Level 2) Support

The contract provides cybersecurity compliance support to a prime contractor aiming to achieve CMMC Level 2 certification, with core responsibilities including the development of self-assessment documentation, creation of a comprehensive system security plan, and full implementation of controls outlined in NIST SP 800-171. This effort is critical for ensuring the prime contractor meets mandatory federal cybersecurity standards required to handle controlled unclassified information within Department of Defense systems. The work is scoped to support the prime’s readiness for third-party assessment and is focused on building robust, auditable cybersecurity practices aligned with CMMC requirements. The subcontract is posted under the NAICS code 541611 for management consulting services and is associated with the ASC Commodities Division of the Department of Defense. Performance is expected to take place at Hill AFB, Utah, with a response deadline of August 12, 2026, and the solicitation was posted on August 4, 2026. Although no set-aside designation is specified, the opportunity is structured as a subcontract and requires proposers to deliver targeted, results-driven cybersecurity compliance services within a defined timeline to enable the prime contractor’s certification pathway.