Cybersecurity Compliance Support (CMMC/NIST SP 800-171)

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by implementing and validating the security controls outlined in NIST Special Publication 800-171 to safeguard covered defense information throughout the scope of performance. This includes conducting a self-assessment of current cybersecurity posture, identifying gaps against the required controls, and executing remediation activities to meet CMMC Level 2 requirements, ensuring all systems handling sensitive defense data are adequately protected. The effort is focused on organizational readiness and documentation to demonstrate compliance without third-party certification at this stage. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is part of the Department of Defense’s Maritime Supply Chain initiative. The solicitation was posted on July 22, 2026, with responses due by August 6, 2026. While the place of performance and specific agency office details are not provided, the work must be performed in alignment with federal cybersecurity standards to support defense information handling. Potential respondents are expected to possess demonstrated experience in cybersecurity compliance frameworks, particularly with NIST 800-171 and CMMC, and be prepared to deliver a structured, documented implementation plan meeting the government’s expectations for securing controlled unclassified information.