Cybersecurity Compliance (NIST SP 800-171 / CMMC)

The contract supports compliance with NIST SP 800-171 and CMMC Level 2 requirements, focusing on system assessments, development of Plans of Action and Milestones, and protection of Controlled Unclassified Information in accordance with DFARS 252.204-7012. The work entails implementing and maintaining cybersecurity controls to safeguard CUI, ensuring alignment with federal standards for defense contractors, and addressing any identified gaps through structured remediation efforts. This is a subcontract set aside entirely for small businesses under the SBA’s Total Small Business Set-Aside program, with a NAICS code of 541512 for Computer Systems Design Services. The solicitation was posted on July 28, 2026, with responses due by August 12, 2026, under the Department of Defense’s LSO Combat Vehicles and Armament organization. Performance location details are unspecified, and the contract is accessible via the DIBBS platform for interested parties to review additional requirements and submit proposals.