CMMC Compliance Implementation & SPRS Reporting

The contract requires the provision of CMMC Level 1 compliance services to ensure adherence to foundational cybersecurity standards for Department of Defense subcontractors. Key deliverables include conducting a comprehensive self-assessment to evaluate current cybersecurity posture, developing a Plan of Action and Milestones to address identified gaps, and submitting the resulting data through the Supplier Performance Risk System. The scope also encompasses verifying that subcontractors downstream meet their respective CMMC compliance flow-down obligations, ensuring end-to-end alignment with required security controls. All activities must be completed in support of NSWC Crane’s mission-critical operations, with performance expected to align with the NAICS code 541611 for management consulting services. The opportunity is posted as a subcontract and requires responses by August 8, 2026, with performance primarily centered at Crane, Indiana.