Data Security & CMMC Compliance Implementation

The contract requires full implementation of NIST SP 800-171 and CMMC Level 2 compliance measures to ensure secure handling of Controlled Unclassified Information. This includes developing a System Security Plan, maintaining a Plan of Action and Milestones, and executing media sanitization procedures in accordance with NIST SP 800-88 guidelines. All activities must meet rigorous federal cybersecurity standards to safeguard CUI across systems and processes, with emphasis on documentation, controls, and operational readiness for audit. The work is scoped as a subcontract under the Department of Defense and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on August 7, 2026, with a response deadline of August 28, 2026, and performance is expected to occur at a location designated as 0, though no specific city or state is provided.