Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

This contract requires the implementation and assessment of cybersecurity controls to ensure compliance with NIST SP 800-171 and CMMC Level 2 standards for systems that handle Controlled Unclassified Information. The work is focused on securing information systems against threats by establishing, documenting, and validating security practices that align with federal cybersecurity frameworks. Successful performance necessitates a thorough evaluation of current technical and administrative safeguards, remediation of identified gaps, and formal attestation to meeting CMMC Level 2 requirements, which include practices related to access control, awareness training, audit and accountability, and incident response. The subcontract is tied to a performance location at Hill Air Force Base with a zip code of 84056-5734 and falls under NAICS code 541611, indicating it involves computer systems design and related services. The solicitation was posted on July 20, 2026, with responses due by July 31, 2026. The contracting entity is part of the Department of Defense under the Construction & Equipment T & IFO EQ office, and the work is intended to support secure handling of sensitive government data. Participation requires demonstrated expertise in cybersecurity compliance, experience with NIST and CMMC frameworks, and the ability to deliver validated documentation and audit-ready evidence of control implementation.