CMMC Level 2 Cybersecurity Compliance Provider

The contract seeks a provider to deliver comprehensive CMMC Level 2 certification support focused on aligning systems with NIST SP 800-171 requirements for the handling of Controlled Unclassified Information. The primary deliverables include the development of a robust System Security Plan tailored to the organization’s operational environment, ensuring all necessary security controls are documented, implemented, and verified to meet CMMC Level 2 standards. This effort is critical for enabling the contractor to handle CUI securely and achieve formal certification under the Cybersecurity Maturity Model Certification framework. The work is being conducted as a subcontract under the Department of Defense’s LAND SUPPLY CHAIN, with performance required in New Cumberland, Pennsylvania, at the zip code 17070-5002. The North American Industry Classification System code is 541512, indicating the nature of the service relates to computer systems design and related activities. Interested parties must submit responses by August 3, 2026, and the contract is open to qualified subcontractors without a specified set-aside classification. Success in this engagement depends on demonstrated expertise in CMMC compliance, familiarity with NIST 800-171 controls, and the ability to produce auditable documentation that withstands third-party assessment.