Cybersecurity Compliance Support (CMMC Level 2)

This contract supports Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance for the handling of controlled unclassified information, requiring comprehensive assistance with documentation, system hardening, and audit readiness. The work involves preparing an organization to meet the stringent cybersecurity requirements of CMMC Level 2 by implementing necessary controls, refining policies and procedures, and ensuring technical systems are configured to safeguard sensitive data. The scope is focused on self-assessment activities aimed at achieving full compliance without external audit, making internal preparation and thorough evidence collection critical components. The contract is a subcontract under a Total Small Business Set-Aside, classified under NAICS code 541512 for computer systems design services, and is issued by the Department of Defense through the Active Devices Division. Performance will occur at Robins Air Force Base, Georgia, with a response deadline of August 3, 2026. All work must be completed by a certified small business, and the contractor is expected to deliver structured, documented outcomes that demonstrate alignment with CMMC Level 2 practices, including risk management, access control, and incident response protocols, to ensure readiness for federal cybersecurity audits.