CMMC Compliance Implementation & Certification Support

The contract seeks a subcontractor to assist the prime contractor in achieving and maintaining CMMC Level 2 compliance, encompassing comprehensive gap assessments, development of remediation plans, and registration in the Supplier Performance Risk System. The work is focused on ensuring alignment with the Department of Defense’s cybersecurity standards for handling controlled unclassified information, with all activities centered on preparing for and achieving official certification. The effort requires expertise in CMMC framework implementation, understanding of NIST SP 800-171 requirements, and demonstrated experience in guiding organizations through the certification process. Performance of this subcontract is required to be conducted in New Cumberland, Pennsylvania, under the auspices of the Nuclear Reactor Program within the Department of Defense. The opportunity is listed under NAICS code 541512, indicating it pertains to computer systems design services, and is structured as a subcontract with no specific set-aside designation. Proposals must be submitted by July 31, 2026, with the solicitation posted on July 16, 2026, through the DIBBS platform, and all deliverables must support the prime’s ability to meet federal cybersecurity obligations with a focus on timeliness, accuracy, and audit readiness.