Cybersecurity Compliance (NIST SP 800-171) & CMMC Support

The contract requires full compliance with NIST SP 800-171 standards and full support for a CMMC Level 2 assessment under DFARS clauses 252.204-7012 and 252.240-7997, including the development of a System Security Plan and necessary remediation efforts to meet required security controls. The work is scoped to ensure the implementation, documentation, and validation of cybersecurity practices aligned with federal requirements for protecting controlled unclassified information within defense supply chains. This is a small business set-aside subcontract under NAICS code 541512, issued by the Department of Defense’s Strategic Acquisition Program Directorate, with a response deadline of August 4, 2026. The opportunity is available through the DIBBS portal and demands proven capability in cybersecurity compliance frameworks, with an emphasis on readiness for third-party assessment, remediation of gaps, and accurate documentation to satisfy CMMC Level 2 certification criteria.