CMMC/NIST Compliance Consultant

This subcontract opportunity, titled CMMC/NIST Compliance Consultant, is a total small business set-aside under the SBIR/STTR mandate for firms with fewer than 500 employees. The project focuses on providing cybersecurity assessments for Small Business Concerns working on Department of the Army and DoD projects. The selected consultant will be responsible for conducting gap analyses against NIST SP 800-172, preparing firms for DCMA and DIBAC assessments, and implementing resiliency measures through secure network environments and auditing tools. Key deliverables for this engagement include the development of System Security Plans, Plans of Action and Milestones, and CMMC readiness reports. The contract falls under NAICS code 541512 and is associated with the U.S. Air Force and the Department of Defense. Interested parties must respond by October 7, 2026.