Cybersecurity Compliance (NIST SP 800-171 / CMMC Support)

The contract seeks a subcontractor to assist the prime contractor in achieving and maintaining compliance with DFARS 252.204-7012 and NIST SP 800-171 standards for the protection of controlled unclassified information. This includes conducting assessments of current cybersecurity controls, identifying gaps, and implementing necessary improvements to align with required frameworks. The support also extends to preparing for Certification under the Cybersecurity Maturity Model Certification program, ensuring the prime contractor is ready for CMMC audits and sustained compliance. All activities must be executed in alignment with federal cybersecurity mandates and documented to demonstrate adherence throughout the compliance lifecycle. This is a small business set-aside opportunity under the SBA Total Small Business Set-Aside category, classified under NAICS code 541512 for computer systems design services. The solicitation is issued by the Department of Defense through the Land Supply Chain office, with responses due by August 17, 2026. The work is performance-based and focused on enabling the prime contractor’s readiness for handling sensitive government data in accordance with mandated security controls. There is no specified place of performance, indicating flexibility in execution, but all efforts must support the prime’s defense-related obligations and meet the stringent requirements for safeguarding controlled unclassified information.