Cybersecurity Compliance Support (CMMC Level 2)

The contract provides cybersecurity compliance support for CMMC Level 2 certification, focusing on achieving NIST SP 800-171 compliance through system hardening and the development of a comprehensive System Security Plan. This effort is aimed at ensuring that information systems meet the required security controls to protect controlled unclassified information within the defense supply chain, with particular emphasis on operational readiness and adherence to federal cybersecurity standards. The work supports a subcontract under the Department of Defense's Aviation Supply Chain initiative, with performance required at Dyess Air Force Base, Texas. All deliverables must be completed by the response deadline of July 28, 2026, with the solicitation posted on July 23, 2026. The contract falls under NAICS code 541512 for computer systems design services and is structured to assist organizations in navigating the complexities of CMMC Level 2 requirements without external certification audits. The scope includes evaluating existing security postures, implementing technical and administrative controls, documenting policies and procedures, and ensuring all system configurations align with NIST guidance to pass a self-assessment. There is no set-aside classification specified, and the work is intended for vendors capable of delivering technical cybersecurity services to defense contractors in a high-security environment.