CMMC Level 2 and Cybersecurity Compliance Support

The contract requires comprehensive implementation of NIST SP 800-171 security controls to ensure the protection of controlled unclassified information in accordance with DFARS 252.204-7012, with the end goal of achieving CMMC Level 2 audit readiness. This includes establishing and maintaining a robust cybersecurity framework that addresses the 110 security requirements outlined in NIST SP 800-171, covering areas such as access control, awareness and training, audit and accountability, configuration management, identification and authentication, and incident response. The contractor must document policies, procedures, and system configurations, and demonstrate operational effectiveness of controls through evidence collection to prepare for an official CMMC assessment. The work is scoped as a subcontract under the Department of Defense, specifically tied to the DDSP NEW CUMBERLAND FACILITY, with performance required at the location identified by ZIP code 17070-5002. The solicitation, issued under NAICS code 541512 for computer systems design services, has a response deadline of July 20, 2026, and is open for submission through the DIBBS portal. The contractor must ensure full alignment with federal cybersecurity standards and be prepared to undergo a third-party audit to verify compliance, making this engagement critical for maintaining the defense industrial base’s cybersecurity posture and ensuring continued eligibility to handle sensitive government information.