Cybersecurity Compliance Support (CMMC Level 2)

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance to handle Controlled Unclassified Information (CUI), requiring full implementation of the NIST Special Publication 800-171 security controls and accompanying policy documentation. This subcontract is aligned with the Department of Defense’s cybersecurity requirements and targets organizations capable of establishing, maintaining, and validating a robust security framework that meets federal standards for protecting sensitive but unclassified data. The effort is focused on ensuring all technical, administrative, and physical safeguards are in place and documented to satisfy CMMC Level 2 criteria. Performance is expected to be carried out in San Diego, California, with a response deadline of June 11, 2026, and the solicitation was posted on May 31, 2026. The NAICS code 541512 indicates the work falls under Computer Systems Design Services, suggesting the need for specialized cybersecurity consulting and implementation expertise. This subcontract is part of a broader initiative under the Nuclear Reactor Program to secure information systems that process or store CUI, requiring vendors to demonstrate proven experience in NIST 800-171 compliance, audit readiness, and cybersecurity policy development tailored to defense-related environments.