NIST SP 800-171 Compliance and CMMC Assessment Support

This contract supports the implementation of NIST SP 800-171 security controls and preparation for a CMMC Level 2 assessment, aimed at ensuring compliance with federal cybersecurity requirements for defense contractors. The work involves guiding the contractor through the full lifecycle of control implementation, documentation, and readiness activities necessary to pass a formal CMMC Level 2 evaluation. All results and evidence must be submitted to the Supplier Performance Risk System (SPRS) to meet Department of Defense compliance obligations and maintain eligibility for future contracts. The effort is structured as a small business set-aside under SBA guidelines, specifically reserved for total small businesses, and is classified under NAICS code 541512 for computer systems design services. The solicitation was posted in July 2026 with a response deadline in August 2026, and performance will occur under the auspices of the Department of Defense’s Strategic Acquisition Program Directorate.