Cybersecurity Compliance (CMMC) Support

The contract requires full compliance with the Cybersecurity Maturity Model Certification (CMMC) framework for all contractor systems that process, store, or transmit Controlled Unclassified Information (CUI). This includes completing registration in the Supplier Performance Risk System (SPRS), conducting annual re-attestations to maintain certification status, and ensuring that all subcontractors handling CUI likewise meet CMMC requirements through appropriate flow-down provisions. The obligation extends throughout the entire supply chain to guarantee consistent cybersecurity posture and regulatory alignment across all tiers of performance. The work is tied to a subcontract under the Department of Defense, specifically managed by Norfolk Naval Shipyard Gf, with performance centered in Portsmouth, Virginia, 23709. The solicitation was posted on July 1, 2026, with responses due by July 16, 2026, and falls under the NAICS code 541512 for computer systems design services. Compliance is non-negotiable and must be demonstrated through documented implementation of CMMC controls, with ongoing verification required to sustain contract eligibility and protect sensitive Defense information.