Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

CMMC SSP & POA&M Development

Active

Federal

Response Deadline08/20/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the development and ongoing maintenance of a System Security Plan and Plan of Action & Milestones compliant with CMMC and NIST standards, ensuring continuous audit readiness and timely annual updates. Responsibilities include aligning documentation with current federal cybersecurity frameworks, tracking remediation activities, and maintaining accurate records to support compliance assessments. The work is classified as a subcontract under NAICS code 541611, indicating it involves administrative management and general management consulting services focused on cybersecurity. The solicitation was posted on July 22, 2026, with a response deadline of August 20, 2026, and is managed by the Department of Defense through the LAND SUPPLY CHAIN organization. The place of performance and exact location details are not specified, but all work must support the defense supply chain's cybersecurity posture in accordance with federal mandates.

General Info

Develop and maintain CMMC/NIST-compliant security plans for DoD supply chain cybersecurity compliance.

Agency

Department Of Defense → LAND SUPPLY CHAINView Agency

NAICS

541611 - Administrative Management and General Management Consulting ServicesView NAICS

Place of Performance

US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 22

subcontract

Response DeadlineAug 20

Submission deadline

Response Deadline

08/20/2026, 05:00:00 PM UTCin 29 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → LAND SUPPLY CHAIN

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → LAND SUPPLY CHAIN

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Author and maintain the System Security Plan (SSP) and Plan of Action & Milestones (POA&M) in alignment with CMMC and NIST requirements, ensuring audit-readiness and annual updates.

Similar Contracts

Same NAICS industry code

Export-Controlled Technical Data Management (ITAR/EAR)This contract requires the management of ITAR and EAR-controlled technical data under strict compliance protocols, ensuring that only personnel who are both JCP-certified and trained in export regulations are permitted to access or handle such data. The scope of work centers on maintaining adherence to DFARS 252.225-7048, which outlines safeguarding requirements for controlled technical information within the Department of Defense supply chain. All activities must be conducted with rigorous oversight to prevent unauthorized disclosures and ensure compliance with U.S. export control laws. The contract is designated as a subcontract under a HUBZone Set-Aside, reflecting a preference for small businesses located in historically underserved zones. It falls under the NAICS code 541611 for administrative management and general management consulting services, indicating a focus on operational and compliance oversight rather than direct manufacturing or technical development. The solicitation is posted by the ASC COMMODITIES DIVISION under the Department of Defense, with a response deadline of August 5, 2026, and all performance obligations must be fulfilled in alignment with federal export control standards regardless of physical location.

ASC COMMODITIES DIVISION

POSTED

about 1 hour ago

DEADLINE

CMMC Supply Chain Compliance ManagementThe contract requires the development and enforcement of subcontractor flow-down clauses to ensure all lower-tier vendors adhere to the Cybersecurity Maturity Model Certification and NIST Special Publication 800-171 standards. This involves implementing structured processes to audit subcontractor compliance, collecting System Security Plans, and maintaining a centralized supplier compliance registry to track adherence across the supply chain. The work is critical to safeguarding controlled unclassified information within the defense industrial base and demands rigorous monitoring and documentation practices to meet federal cybersecurity requirements. All awarded parties must establish clear accountability mechanisms for subcontractors, including verification protocols and corrective action workflows, to ensure continuous compliance. The effort is scoped under the NAICS code 541611 for management consulting services and is issued by the Department of Defense under LAND SUPPLY CHAIN. Responses are due by August 20, 2026, with the solicitation published on July 22, 2026, indicating a focus on proactive supply chain risk mitigation aligned with defense cybersecurity mandates.

LAND SUPPLY CHAIN

POSTED

about 1 hour ago

DEADLINE

CMMC Certification Readiness & ImplementationThe contract requires comprehensive support to achieve CMMC certification by conducting a gap assessment against CMMC requirements, developing a complete System Security Plan, and implementing all missing security controls to align with DFARS 252.204-7012 and NIST SP 800-171 standards. The scope encompasses evaluating current cybersecurity practices, identifying deficiencies relative to the required CMMC maturity level, and executing targeted remediation measures to ensure full compliance. The deliverable includes preparing the organization for an official CMMC assessment, ensuring all documentation, policies, and technical controls are in place and properly documented. All work must be completed in accordance with Department of Defense specifications and is classified as a subcontract under NAICS code 541611, targeting organizational readiness through technical and procedural enhancements. The solicitation is managed by the Land Supply Chain under the Department of Defense, with a response deadline of August 20, 2026, and no set-aside provisions specified. Performance is expected to meet federal cybersecurity obligations without geographic restriction, and while no point of contact is listed, all submissions must adhere to the DIBBS platform guidelines for the listed solicitation number.

LAND SUPPLY CHAIN

POSTED

about 1 hour ago

DEADLINE

Supply Chain Traceability & Documentation ServicesThe contract requires the provision of comprehensive documentation and record-keeping services to ensure complete traceability across the supply chain in strict adherence to DLAD C03, DFARS, FAR, and DLA directives. The scope centers on maintaining accurate, auditable records that support compliance with federal defense procurement standards, ensuring that every component and transaction within the supply chain can be verified and tracked from origin to final delivery. This includes the implementation of systems and protocols that meet the rigorous data integrity and reporting requirements mandated by the Department of Defense. This subcontract, issued under NAICS code 541611 by the ASC Commodities Division, is open for response until July 29, 2026, with all work expected to support defense logistics operations. While specific performance locations and point of contact details are not provided, the requirement is tied to Department of Defense activities and demands a high level of precision in documentation processes. Contractors must be prepared to deliver services that enable full transparency and accountability, with potential audits and inspections ensuring alignment with all applicable regulatory frameworks.

ASC COMMODITIES DIVISION

POSTED

about 1 hour ago

DEADLINE

Inventory Management and ReportingThe contract titled Inventory Management and Reporting requires the maintenance of accurate digital inventory records and the regular generation of monthly usage and delivery reports to support audit requirements and operational planning. The work is designated as a subcontract under NAICS code 541611 and is managed by the Public Works Department of the BSFMD in California. The solicitation was posted on July 21, 2026, with a response deadline of August 4, 2026, at 10:00 PM PST. All performance activities are expected to take place within California, though no specific city or address is provided. The contract emphasizes precision in recordkeeping and timely reporting to ensure transparency and support efficient resource allocation for public works operations.

Public Works Department, BSFMD

POSTED

about 19 hours ago

DEADLINE

Security Compliance and CJIS/PCI/HIPAA ImplementationThe contract requires the implementation and documentation of comprehensive security controls to ensure compliance with CJIS, PCI DSS, and HIPAA standards. This includes deploying technical safeguards such as encryption for sensitive data, robust audit logging to track access and modifications, and proactive malware protection to defend against cyber threats. All measures must be thoroughly documented to demonstrate adherence to regulatory requirements and to facilitate audits or inspections by oversight bodies. The work is structured as a subcontract under the Public Works Department, BSFMD, in California, with a posted date of July 21, 2026, and a response deadline of August 4, 2026. The NAICS code 541611 indicates this is related to computer systems design services, aligning with the technical nature of the security implementation tasks. Although specific location details are not provided, performance is expected within California, and the project seeks qualified subcontractors capable of delivering fully compliant, well-documented security solutions tailored to the stringent demands of law enforcement, financial, and healthcare data environments.

Public Works Department, BSFMD

POSTED

about 19 hours ago

DEADLINE

Pre-Bid Site Assessment and Operational ConsultingContractors are required to conduct pre-bid site visits and deliver operational consulting services to ensure full compliance with tunnel dimensions, loading protocols, and scheduling constraints necessary for a successful bid submission. The work focuses on evaluating physical site conditions and providing expert guidance to align proposal inputs with technical and logistical requirements, mitigating risks before formal bids are prepared. This subcontract opportunity is posted by the state of Utah under NAICS code 541611, with responses due by August 13, 2026, and is available through the Utah BonfireHub platform. All activities must be completed in time to support accurate and compliant bid development, with no set-aside provisions specified.

POSTED

about 19 hours ago

DEADLINE

Single Audit Services (Uniform Guidance 2 CFR 200)The contract seeks qualified providers to perform Single Audit services in accordance with the Uniform Guidance outlined in 2 CFR 200, focusing on the examination of federal fund usage, evaluation of internal controls over federal awards, and reporting of audit findings. The work requires adherence to federal standards for auditing state and local governments, nonprofit organizations, and other entities receiving federal funds, ensuring accuracy, compliance, and transparency in financial reporting related to federal programs. Auditors must be able to identify federal expenditures, assess risk, test control effectiveness, and issue clear, actionable findings that meet federal requirements. Subcontractors responding to this opportunity must submit proposals by the deadline of August 5, 2026, and are expected to have the expertise and credentials to conduct audits under the Single Audit Act. The North American Industry Classification System code 541611 indicates the work falls under management consulting services, specifically financial auditing. While the agency is listed as Utah with no specific office address or point of contact provided, the place of performance is not defined, allowing for potential remote or statewide service delivery. Interested parties should access the opportunity via the provided link to ensure full compliance with submission protocols and requirements.

POSTED

about 20 hours ago

DEADLINE

State Compliance Testing (Utah Auditor’s Office Requirements)The contract requires the performance of compliance testing in accordance with standards set by the Utah State Auditor’s Office to verify adherence to state-specific financial and operational regulations. This subcontract is focused on ensuring that all applicable state mandates are met through systematic evaluation and reporting, with the work to be conducted in alignment with the auditor’s requirements. The solicitation, posted on July 21, 2026, has a response deadline of August 5, 2026, and is classified under NAICS code 541611, indicating it pertains to management consulting services related to compliance and regulatory support. The place of performance and organizational details are not specified in the provided data, but the contracting entity is identified as the state of Utah without further administrative division or office address. There is no set-aside designation for small businesses or other categories, and no point of contact is listed. Interested parties must submit their responses through the provided Utah-based BonfireHub portal by the stated deadline to be considered for award. The scope centers entirely on audit readiness and regulatory compliance, with no mention of additional deliverables beyond testing and reporting as mandated by the state auditor’s office.

POSTED

about 20 hours ago

DEADLINE

Immigration Reform and Control Act (IRCA) Compliance SupportThe contract requires full support for compliance with the Immigration Reform and Control Act (IRCA) by verifying the employment eligibility of all workers, including subcontractors, and maintaining accurate I-9 documentation in accordance with federal regulations. This involves conducting timely and rigorous screenings to ensure that all individuals engaged in work under the contract possess proper authorization to work in the United States, with meticulous recordkeeping to demonstrate adherence to IRS and DHS requirements. The scope encompasses end-to-end management of I-9 forms, including proper completion, retention, and audit readiness, with a focus on minimizing exposure to legal or financial penalties. The contract is classified as a subcontract under NAICS code 541611 and is issued by the Arizona office of Water Services with a response deadline of August 11, 2026. There is no set-aside designation specified, and the place of performance and primary office address are not detailed in the provided data. The work performed must align with federal immigration compliance standards and be scalable to accommodate a workforce that includes third-party contractors, with the expectation of consistent, accurate, and auditable documentation practices throughout the duration of the contract.

POSTED

about 21 hours ago

DEADLINE

Title VI Nondiscrimination Compliance Monitoring and ReportingThis contract requires comprehensive monitoring and reporting activities to ensure compliance with Title VI of the Civil Rights Act of 1964, specifically within the context of water services operations under the Arizona agency. The focus is on overseeing subcontractor selection processes, employment practices, and equitable access to services to prevent any form of discrimination based on race, color, or national origin. Continuous monitoring is mandated to identify and address disparities, with strict obligations to document findings and submit regular reports to both the City and the Federal Aviation Administration to demonstrate adherence to federal nondiscrimination requirements. The work involves proactive assessment of practices across the supply chain and service delivery network to maintain legal and regulatory compliance. The contract is classified as a subcontract under NAICS code 541611, indicating it involves management, scientific, and technical consulting services. It was posted on July 21, 2026, with responses due by August 11, 2026, and is administered by the Water Services agency in Arizona. Although specific location details for performance or contact information are not provided, the work is tied to federal funding and oversight mechanisms governed by FAA and municipal requirements. The successful contractor must possess expertise in civil rights compliance, data collection and analysis, and the ability to translate findings into actionable recommendations while maintaining rigorous documentation standards for audit readiness.

POSTED

about 21 hours ago

DEADLINE

Small Business Subcontracting Compliance & Reporting SupportThe contract seeks administrative and compliance support services to ensure adherence to small business and DBE-N subcontracting requirements under a Water Services procurement through the state of Arizona. The contractor will be responsible for maintaining comprehensive records, preparing required affidavits, and ensuring the prime contractor remains audit-ready at all times. This includes managing documentation workflows, verifying subcontractor certifications, and generating timely reports to meet federal and state obligations tied to minority business enterprise participation. The work is critical to sustaining eligibility for set-aside contracts and avoiding penalties related to noncompliance. The solicitation was posted on July 21, 2026, with a response deadline of August 11, 2026. It falls under NAICS code 541611, indicating it targets management consulting services, specifically those related to administrative and compliance functions. Although no set-aside type is specified, the focus is firmly on supporting small business and DBE-N subcontracting goals. The place of performance and point of contact have not been provided, suggesting flexibility in remote or regional service delivery. The contract is structured as a subcontract, implying the awardee will support a primary contractor executing work for Water Services. Applicants should be prepared to demonstrate proven experience in subcontracting compliance systems, audit preparedness, and state-specific regulatory frameworks.

POSTED

about 21 hours ago

DEADLINE

More opportunities from Department Of Defense → LAND SUPPLY CHAIN

Same awarding agency

Security Assessment & SPRS Submission SupportThe contract requires the performance of a security assessment aligned with NIST SP 800-171 standards, either conducted internally or through a qualified third party, to evaluate the organization’s compliance with federal cybersecurity requirements. The assessment must be scored using the CMMC Assessment Guide to determine the organization’s cybersecurity maturity level, and the resulting findings and scores must be formally submitted to the Supplier Performance Risk System (SPRS). This effort is essential for demonstrating compliance with Department of Defense cybersecurity expectations and maintaining eligibility as a supplier within the defense supply chain. The work must be completed and reported prior to the response deadline of August 20, 2026, under a subcontract arrangement classified under NAICS code 541690 for other scientific and technical consulting services. The agency responsible is the Department of Defense through its Land Supply Chain division.

Other Scientific and Technical Consulting Services

POSTED

about 1 hour ago

DEADLINE

NIST SP 800-171 Security Control ImplementationThe contract requires the implementation and documentation of technical and administrative security controls aligned with NIST SP 800-171 Rev 2 across all 14 control families, including access control, audit and accountability, and system integrity. The effort is focused on ensuring comprehensive compliance with federal cybersecurity standards for protecting controlled unclassified information within a Department of Defense subcontract. The work involves not only deploying the necessary controls but also providing detailed documentation to demonstrate adherence to each requirement, ensuring auditable and verifiable security posture across the entire system environment. This subcontract, titled NIST SP 800-171 Security Control Implementation, is under the NAICS code 541512 and is issued by the Land Supply Chain organization within the Department of Defense. The solicitation was posted on July 22, 2026, with a response deadline of August 20, 2026. The performance location and exact point of contact are not specified, but the work is expected to support the broader security objectives of the DoD supply chain. All deliverables must meet the stringent requirements of NIST SP 800-171 Rev 2, and successful fulfillment will involve rigorous testing, validation, and reporting to confirm full compliance with the specified security control families.

Computer Systems Design Services

POSTED

about 1 hour ago

DEADLINE

Cyber Incident Response & ReportingThe contract requires the establishment and ongoing maintenance of a comprehensive cyber incident response plan aligned with Department of Defense standards. This includes continuous monitoring for cyber intrusions, rapid detection and containment of security breaches, and the timely reporting of all incidents to the DoD Cyber Crime Center within 72 hours of discovery. The scope emphasizes proactive defense and strict adherence to reporting timelines to ensure situational awareness and coordinated response across DoD networks. The contract is structured as a subcontract under the NAICS code 541512 for Computer Systems Design Services and is solicited by the Land Supply Chain office within the Department of Defense. Responses are due by August 20, 2026, and performance is expected to support DoD mission-critical infrastructure regardless of physical location. While no set-aside designation is specified, the work is tied to national security obligations and requires demonstrated capability in cyber incident management and compliance with federal cybersecurity protocols.

Computer Systems Design Services

POSTED

about 1 hour ago

DEADLINE

SPRING, HELICAL, COMP

Spring Manufacturing

POSTED

about 1 hour ago

DEADLINE

PANEL, VEHICULAR OPE

All Other Miscellaneous Fabricated Metal Product Manufacturing

POSTED

about 1 hour ago

DEADLINE

Gasket, Packing, and Sealing Device Manufacturing

POSTED

about 1 hour ago

DEADLINE

All Other Rubber Product Manufacturing

POSTED

about 1 hour ago

DEADLINE

GUARD, MECHANICAL DR

Speed Changer, Industrial High-Speed Drive, and Gear Manufacturing

POSTED

about 1 hour ago

DEADLINE

All Other Miscellaneous Manufacturing

POSTED

about 1 hour ago

DEADLINE

Gasket, Packing, and Sealing Device Manufacturing

POSTED

about 1 hour ago

DEADLINE