Defense Cybersecurity Compliance (CMMC/NIST SP 800-171)

This contract involves providing support to achieve and maintain compliance with Cybersecurity Maturity Model Certification (CMMC) Level 2 and NIST SP 800-171 standards. The scope includes conducting assessments and managing submissions to the Supplier Performance Risk System (SPRS), key for meeting Department of Defense cybersecurity requirements. It is subcontract work under NAICS code 541512, which relates to computer systems design services. The contract is issued by the Department of Defense through the ASC Commodities Division, with the place of performance located in Tracy, California. The solicitation was posted on May 13, 2026, with responses due by May 21, 2026. This effort focuses on ensuring Defense Department contractors comply with critical cybersecurity mandates essential for protecting controlled unclassified information in the defense supply chain. The contract supports ongoing cybersecurity readiness and risk mitigation efforts aligned with DoD regulations.