Cybersecurity Compliance Support (CMMC Level 2)

The contract supports cybersecurity compliance for CMMC Level 2 certification, focusing on systems that handle Controlled Unclassified Information. It encompasses a full suite of services including gap analysis to identify deficiencies against NIST SP 800-171 requirements, development of necessary security policies, creation of a System Security Plan, and preparation of a Plan of Action and Milestones to address outstanding compliance gaps. The work is intended to bring organizations into full alignment with federal cybersecurity standards demanded for defense contractors handling sensitive data. Services are scoped to ensure a repeatable, auditable compliance posture that meets Department of Defense expectations. Performance of this subcontract is tied to Patrick Space Force Base, with a designated deadline for responses by August 21, 2026. Administered by the Defense Logistics Agency under the Department of Defense, the contract falls under NAICS code 541512 for computer systems design services. While no set-aside designation is specified, the nature of the work requires specialized cybersecurity expertise and is structured as a subcontract, suggesting integration into a broader prime contractor effort. All deliverables must be finalized to enable successful CMMC Level 2 assessment and validation, with no tolerance for partial or incomplete compliance artifacts.