CMMC Compliance Implementation & Self-Assessment Support

The contract seeks a subcontractor to provide consulting and technical support for implementing Cybersecurity Maturity Model Certification (CMMC) practices within the Nuwc Division Newport environment. The scope includes guiding the organization through the adoption of required cybersecurity controls, conducting internal self-assessments to evaluate compliance, thoroughly documenting findings, and preparing all necessary materials for submission to the Supplier Performance Risk System (SPRS). The work is focused on ensuring alignment with CMMC requirements to meet Department of Defense standards, with all activities centered around achieving and validating compliance readiness. The opportunity is posted under NAICS code 541611 and is categorized as a subcontract with no specific set-aside designation. Responses are due by May 15, 2026, at 6:00 PM, and performance will be based at the Newport location with a ZIP code of 02841. The contracting activity is under the Department of Defense, with Nuwc Division Newport as the executing agency, and the subcontractor is expected to deliver expert-level support to bridge gaps in cybersecurity posture, facilitate documentation, and ensure the timely and accurate submission of compliance data for SPRS evaluation.