Cybersecurity Implementation & CMMC Compliance

This contract seeks a small business subcontractor to implement comprehensive cybersecurity measures aligned with NIST SP 800-171, including deployment of multi-factor authentication and secure logging systems to protect controlled unclassified information. The scope further encompasses preparing the system for the Risk Management Framework authorization to operate process and providing direct support toward achieving CMMC Level 2 certification, ensuring full compliance with Department of Defense cybersecurity standards. Performance is required at Hill Air Force Base, with a focus on delivering actionable, auditable controls that meet federal and DoD cybersecurity requirements. The opportunity is set aside exclusively for small businesses under the SBA’s Total Small Business Set-Aside program and is categorized under NAICS code 541512 for computer systems design services, with responses due by July 27, 2026.