Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

CMMC Third-Party Assessment (C3PAO) Services

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This contract entails providing official Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment services as a Third-Party Assessment Organization (C3PAO). The scope includes conducting an on-site evaluation, reviewing necessary documentation, and submitting results to the Supplier Performance Risk System (SPRS). The objective is to ensure that the contracted entity complies with the Department of the Navy’s cybersecurity requirements in alignment with the Department of Defense standards. The contract is classified as a subcontract under NAICS code 541612, relating to human resources consulting services. The performance location is designated as San Diego, with no specific details on the agency office address or point of contact provided. The solicitation does not specify a set-aside type, suggesting it is open beyond any particular socio-economic category. This engagement supports maintaining robust cybersecurity practices for defense-related operations through rigorous third-party validation.

General Info

Provide CMMC Level 2 assessment services on-site, ensuring Navy cybersecurity compliance in San Diego.

Agency

Department Of Defense → Department Of The NavyView Agency

NAICS

541612 - Human Resources Consulting ServicesView NAICS

Place of Performance

San Diego, CA, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedMar 27

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Department Of The Navy

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → Department Of The Navy

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Perform official CMMC Level 2 certification through a Cybersecurity Third-Party Assessment Organization (C3PAO), including on-site evaluation, documentation review, and SPRS submission.

Similar Contracts

Same NAICS industry code

Employee Assistance Program ProviderThe Port of Seattle is seeking a provider for its Employee Assistance Program, a core component of its Total Rewards Package designed to support employees and their families through confidential, round-the-clock access to assessment, referral, and support services. The program offers comprehensive resources covering lifestyle and daily living needs, family support, crisis intervention, and financial and legal assistance, delivered via phone or an online platform. These services are available not only upon employee request but also when initiated by Human Resources to promote workforce wellbeing and effectiveness. The program is strategically aligned with the Port’s Century Agenda to build a highly effective public agency by enhancing employee engagement and retention, recognizing that the talent and stability of its staff are essential to achieving its mission. The solicitation is classified under NAICS code 541612 and is posted as a forecast with no set-aside designation, indicating an open competition for qualified vendors. The contracting office is the Port’s Human Resources department, with primary point of contact Mazarine Ebengho Kyalumba and project manager Kecia Reichstein available for inquiries. The program’s implementation will be based at the Port of Seattle’s operational locations, and the selected provider will be expected to deliver consistent, high-quality support services that align with the agency’s values and objectives. The portal for further details is accessible through the Port’s official website, and the posting date reflects the anticipated timeline for future procurement activities.

Human Resources

POSTED

about 9 hours ago

DEADLINE

NIST SP 800-171 Compliance Assessment & System Security Plan DevelopmentThe contract requires performing a comprehensive gap assessment against the NIST SP 800-171 cybersecurity framework to evaluate the current state of an information system’s security controls. Based on the findings, the contractor must develop or update the System Security Plan to align with NIST requirements, ensuring all necessary policies, procedures, and control implementations are properly documented and integrated. The deliverables include a detailed compliance score that quantifies the system’s adherence to the standard and a prioritized remediation roadmap outlining actionable steps, timelines, and resources needed to address identified deficiencies and achieve full compliance. The work is classified as a subcontract under NAICS code 541612 and is being procured by the DOD’s ASC Commodities Division, with performance expected to occur at Hill AFB, Utah, in the ZIP code 84056-5734. The solicitation was posted on July 24, 2026, and responses are due by July 29, 2026. All activities must be completed in alignment with federal cybersecurity standards, with final deliverables intended to support the organization’s ability to protect controlled unclassified information and meet regulatory obligations. The contractor must demonstrate expertise in NIST 800-171 assessments, SSP development, and risk-based remediation planning.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Security Compliance and Reporting ServicesThe contract requires the provision of comprehensive security services for contractor personnel deploying to Kazakhstan, with a focus on adherence to DS/IS/IND security protocols. Key responsibilities include conducting mandatory security briefings, tracking security clearances, and promptly reporting any security incidents to ensure full compliance with U.S. Department of State standards. All activities must be executed in support of operations at the U.S. Embassy in Astana, where the place of performance is formally designated. The subcontract is categorized under NAICS code 541612, indicating it relates to management consulting services with a specialized emphasis on security compliance and risk mitigation. The solicitation is open for responses until July 30, 2026, and was posted on July 24, 2026, with the contracting entity being the U.S. Department of State through its office in Nur-Sultan. While no set-aside preferences are indicated and no specific point of contact is provided, contractors must ensure all deliverables align with the embassy's operational security requirements. Participation involves strict coordination with U.S. government security frameworks and a high level of accountability for the integrity and timeliness of all reporting and compliance documentation.

US Embassy Nur-Sultan

POSTED

DEADLINE

Skilled Labor Planning & Workforce Scaling StrategyThe contract requires the development of a comprehensive workforce strategy to address skilled labor demands during periods of operational surge, focusing on recruitment, training, and retention initiatives tailored to critical aviation support functions. The effort centers on identifying current and projected skill gaps, designing scalable training programs to rapidly onboard and upskill personnel, and implementing retention measures to stabilize the workforce amid high-turnover environments. This subcontract supports the Department of Defense’s Oklahoma City-based defense logistics activity, with performance tied to maintaining mission readiness through a resilient, adaptable labor force. The solicitation is open for responses until August 24, 2026, under the NAICS code 541612 for management consulting services, indicating the need for strategic advisory expertise rather than direct labor provision. The work must be executed in alignment with the organizational priorities of the Defense Logistics Agency Aviation, with no specific set-aside criteria mentioned, allowing broad eligibility for qualified subcontractors. Successful proposers will need to demonstrate proven experience in workforce planning within defense or high-tempo operational contexts, with methodologies that can be rapidly deployed and measured for impact. All deliverables must support long-term workforce sustainability while addressing immediate surge requirements.

Ok DLA Aviation At Oklahoma City

POSTED

DEADLINE

Security and Personnel Vetting ComplianceThe contract entails the pre-screening and submission of personnel for mandatory federal vetting processes including NACI, E-Verify, FBI fingerprinting, and NCIC-III/TSDB checks, ensuring full compliance with applicable U.S. government directives. All submissions must adhere to established protocols for conducting background investigations and verifying employment eligibility, with responsibility resting on the subcontractor to manage the accuracy, timeliness, and completeness of all data provided to federal systems. The work is performed under the oversight of the Department of Defense through W4LD USA Hecsa, with specific focus on upholding national security and personnel integrity standards across all submitted cases. This subcontract, classified under NAICS code 541612, has a submission deadline of July 31, 2026, and was posted on July 24, 2026, indicating a short response window for qualified vendors. While no set-aside classification or location details are specified, performance is expected to support federal requirements regardless of physical location, and the contractor must be capable of handling sensitive information in alignment with defense and intelligence community standards. All participants must be processed through standardized federal databases without delay, and failure to meet compliance thresholds could result in disqualification or termination of subcontractor status.

POSTED

DEADLINE

Identity and Access Management for Contractor PersonnelThe contract requires support for compliance with the Department of State’s Personnel Identity Verification policy by managing end-to-end identity verification, badging, and PIV card issuance for contractor personnel who need access to U.S. government facilities in Podgorica. This includes validating the identity of contractors, ensuring adherence to federal credentials standards, and coordinating the physical and digital processes necessary to issue and maintain secure access credentials. All activities must align with DOS PIC requirements to ensure only authorized individuals gain entry to sensitive government locations. The work is scoped specifically to support the U.S. Embassy in Podgorica under the NAICS code 541612 for management consulting services and is structured as a subcontract. Proposals must be submitted by August 24, 2026, and the performance location is fixed at the embassy facility in Podgorica with a postal code of 81000. The contract does not specify set-aside status or point of contact details, and all responsibilities center on maintaining secure, compliant identity and access management systems tailored to the operational needs of U.S. government personnel and contractors operating within the embassy’s jurisdiction.

US Embassy Podgorica

POSTED

DEADLINE

Security & Background Investigation ServicesThe contract requires the performance of federal background investigations, including NACI, MBI, and BI, for all personnel, with strict adherence to timelines for initiation and secure handling of sensitive personnel data. The scope of work centers on conducting or managing the end-to-end investigation process to ensure compliance with federal standards and safeguarding the integrity of classified and personal information throughout the lifecycle of each inquiry. This is a subcontract under the Department of Veterans Affairs, specifically managed by the 262-NETWORK Contract Office 22, with a North American Industry Classification System code of 541612. The solicitation was posted on July 24, 2026, and responses are due by August 14, 2026, at 6:00 p.m. The place of performance and agency office address are not specified, indicating the work may be performed remotely or across multiple locations. No set-aside type is designated, and the point of contact information is not provided in the available data.

262-NETWORK Contract Office 22 (36C262)

POSTED

DEADLINE

RFP - Third-Party Independent Benchmarking and Assurance ServicesAll submissions for the RFP titled Third-Party Independent Benchmarking and Assurance Services under solicitation number WS5735871318 must be received by August 3, 2026, at 14:00 EDT, overriding any previously stated deadlines on SAP Business Network or CanadaBuys; responses submitted after this time will be deemed non-responsive. This solicitation is exempt from Trade Agreements under a National Security Exemption and is restricted exclusively to Canadian suppliers in accordance with the Buy Canadian Policy Framework. The requirement is to provide on-demand Third-Party Benchmarking and Assurance Services to support the transformation and renewal of HR and pay systems across the Government of Canada, activated through Task Authorizations. The contract is issued by Public Services and Procurement Canada, with the NAICS code 541612, and all performance will take place within Canada. The primary point of contact is Melanie Desjardins, Contracting Authority, reachable at melanie.desjardins@tpsgc-pwgsc.gc.ca.

Department of Public Works and Government Services

POSTED

DEADLINE

Cybersecurity Compliance and CMMC Level 2 ImplementationThe contract requires comprehensive support to achieve CMMC Level 2 compliance for systems handling covered defense information, encompassing gap assessments against NIST SP 800-171 controls, implementation of required security measures, development of a detailed System Security Plan, and accurate SPRS reporting. All activities must align with Department of Defense cybersecurity standards and ensure full readiness for CMMC certification. The work is scoped to a subcontract under the ACTIVE DEVICES DIVISION and must be performed at a designated location in San Diego, California, with a zip code of 92136-3581. The solicitation, issued under NAICS code 541612 for other professional, scientific, and technical services, has a response deadline of August 3, 2026, and was posted on July 23, 2026, with no set-aside designation specified.

ACTIVE DEVICES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance and Reporting (NIST SP 800-171)The contract requires full implementation of the NIST SP 800-171 security controls on all systems handling covered defense information, ensuring robust protection of sensitive data in alignment with federal cybersecurity standards. Compliance must be maintained throughout the performance period, with continuous monitoring and documentation to demonstrate adherence to each control requirement. Any cyber incident affecting these systems must be reported to the Defense Counterintelligence and Security Agency (DC3) within 72 hours of discovery, with timely and accurate reporting being a mandatory condition of performance. This subcontract is issued under the NAICS code 541612 and is performance-based, with the place of performance located in New Cumberland, Pennsylvania at the ZIP code 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026, with the contracting entity being the Electrical Devices Division within the Department of Defense. Failure to meet the cybersecurity requirements or miss the incident reporting window could result in contract noncompliance, financial penalties, or termination. All parties must ensure their systems, personnel, and procedures are fully prepared to meet these obligations prior to contract award.

ELECTRICAL DEVICES DIV

POSTED

DEADLINE

Prohibited Sources Compliance Monitoring (Huawei, ZTE, CCMCs)The contract requires strict monitoring and enforcement to ensure no telecommunications equipment or services from prohibited sources including Huawei, ZTE, or由中国控制的通信公司 are used at any level of performance. Compliance is mandated under DFARS clauses 7017 and 7007, which prohibit the acquisition or use of telecom equipment deemed a national security risk. The subcontract is tied to a specific performance location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and falls under the NAICS code 541612 indicating information technology consulting services. Responsibility for verifying compliance rests with the subcontractor, who must maintain documentation and implement safeguards to prevent inadvertent incorporation of banned equipment or services into systems or solutions delivered under the agreement. The Department of Defense, through the Maritime Supply Chain office, is enforcing this requirement as part of broader supply chain security initiatives. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, leaving a limited window for qualified parties to submit proposals and demonstrate their adherence to the security protocols outlined.

MARITIME SUPPLY CHAIN

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)The contract requires implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information and ensure compliance with DFARS 252.204-7012, mandate for contractors handling Covered Defense Information. This includes establishing and maintaining appropriate technical, administrative, and physical safeguards to protect CUI, as well as establishing procedures for timely cyber incident reporting and completing a self-assessment based on the NIST 800-171 requirements. Documentation of the assessment and ongoing compliance activities must be maintained and made available upon request. The work is a subcontract under the Department of Defense, specifically tied to the Maritime Supply Chain, with performance required at New Cumberland, Pennsylvania, zipcode 17070-5002. The NAICS code 541612 indicates the nature of the effort relates to computer systems design services, suggesting the focus is on technical implementation and integration of security controls. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, and bidders must demonstrate capability to meet all federal cybersecurity requirements for defense contractors handling sensitive government data.

MARITIME SUPPLY CHAIN

POSTED

DEADLINE

More opportunities from Department Of Defense → Department Of The Navy

Same awarding agency

NAWCAD Long Range Acquisition Forecast (LRAF) – FY26The Naval Air Warfare Center Aircraft Division (NAWCAD) Patuxent River announces the FY26 Long Range Acquisition Forecast (LRAF) to provide visibility into upcoming procurement needs across its program offices, including PMA-209, PMA-276, PMA-242, and others, covering systems engineering, software development, test and evaluation, secure communications, instrumentation, and logistics support for air, ship, and shore-based platforms. This forecast is not a solicitation and carries no obligation for the government to award contracts; it serves solely as an informational tool with updates issued quarterly, with the FY26Q2 version already posted. The forecast spans estimated contract values from $10 million to $1 billion, representing multiple Indefinite-Delivery/Indefinite-Quantity (IDIQ) vehicles including SeaPort and SA IDIQ contracts with projected award windows between FY26 Q3 and FY28 Q1 and performance periods extending five years. Key performance locations are centered in St. James, Maryland, with additional sites in Orange Park, Florida, and operational test sites such as San Clemente Island, California, where inspection and acceptance for systems like sonobuoys follow the NAVAIR Sonobuoy Quality Assurance Program. A majority of the anticipated procurements are designated as Small Business Set Asides, indicating targeted opportunities for small businesses under FAR Part 19, though some contracts are unrestricted. Funding is allocated through specific Treasury Account Symbols and Accounting Classification Reference Numbers such as R408, R799, AC13, and DA01, supporting diverse programs including Battlespace Modeling and Simulation, Maritime Patrol & Reconnaissance, and Precision Strike Weapons. Contracting officers from multiple NAWCAD divisions are identified, but no Contracting Officer’s Representatives or technical representatives are listed, and no detailed invoicing methods, packaging requirements, or inspection criteria beyond the SQAP are specified. While security clearances for TS/SCI are required for certain roles and organic Lead Systems Integrator teams are mandated under WOLF programs, specific clause language, evaluation factors, proposal submission instructions, and contract type details like FFP are absent, suggesting these elements will be defined in future solicitations via SAM.gov. The forecast includes numerous contract identifiers, projected RFP release dates, and socioeconomic designations, but lacks formal contract clauses, deliverable specifications, or payment terms, leaving full acquisition requirements to be detailed in subsequent competitive processes.

Engineering Services

POSTED

DEADLINE

Domestic Production of Plant-based Carbon Fiber Precursors in Support of Hypersonic ApplicationsThe United States Navy is seeking solutions to establish a domestic source of plant-based carbon fiber precursors for use in thermal protection systems critical to hypersonic applications. Currently, rayon-based carbon fibers—essential for their superior thermal performance over alternatives like PAN and pitch-based fibers—are not produced in the U.S. and are sourced from overseas, primarily European suppliers, creating supply chain vulnerabilities. The domestic production of rayon fibers halted in 1997 due to environmental concerns tied to the traditional viscose process, and while global trends are moving toward non-toxic cellulose-based production methods, no alternative fibers have yet been validated for use in high-performance carbon phenolic composites. This effort requires the development and characterization of a new plant-based precursor material that can be reliably carbonized into a fiber meeting the structural and thermal requirements of hypersonic systems. The successful contractor must be a U.S.-owned small business with fewer than 500 employees and must be capable of obtaining and maintaining a Secret-level security clearance and facility, as work in Phase II may involve classified information. Compliance with the National Industrial Security Program Operating Manual is mandatory, and the contractor must be able to safeguard classified material throughout the project lifecycle. This initiative is part of a broader national imperative to secure critical materials for defense and space applications and reduce dependence on foreign supply chains.

Artificial and Synthetic Fibers and Filaments Manufacturing

POSTED

DEADLINE

High Precision Specialized Waveguides for Extreme TemperaturesThe Navy is seeking the development of high-precision specialized waveguides capable of operating under extreme hypersonic environmental conditions where surface temperatures exceed 1,000 degrees Celsius. Traditional RF cables fail to maintain signal integrity and power delivery under such thermal stress, making waveguides the preferred solution due to their superior high-power transmission capabilities. The waveguides must perform reliably across a broad spectrum of RF frequencies, specifically targeting the X, Ku, K, and Ka bands, while accommodating the challenge of minimizing size at higher frequencies. The design must allow for complex and unique geometries without degrading signal performance, and any dielectric medium used—such as air—must exhibit permittivity near that of a vacuum to ensure minimal signal loss even at sustained high thermal loads. Materials must remain stable and efficient under prolonged exposure to extreme heat without compromising transmission quality. This solicitation is a total small business set-aside under the SBIR/STTR mandate, restricted to U.S.-owned and operated entities with fewer than 500 employees, classified under NAICS code 334290. Successful bidders must be capable of obtaining and maintaining a secret-level security clearance and a classified facility, as work in Phase II may involve classified information tied to national defense. Contractor personnel must comply with the National Industrial Security Program Operating Manual, and all classified materials must be safeguarded in accordance with Title 32, Part 2004.20 of the Code of Federal Regulations. Only companies that meet stringent U.S. ownership standards and can demonstrate compliance with DCSA security protocols will be eligible, with no foreign influence permitted unless explicitly mitigated and approved. The solicitation closes on July 22, 2026, with performance expected to advance critical capabilities for hypersonic platforms operating in the most demanding thermal environments.

Other Communications Equipment Manufacturing

POSTED

DEADLINE

Program Management & Technical Support ServicesThe contract involves providing program management, technical advisory, and administrative support services to Integrated Product Teams (IPTs) within PMA offices. It is a subcontract under the Department of the Navy, falling within the Department of Defense framework, with a focus on the NAICS code 541611, which pertains to management consulting services. The work will be performed in St James, although further geographical details are not specified. The services aim to enhance the efficiency and effectiveness of the PMA offices by supporting cross-functional teams through expert guidance and operational assistance. The contract's scope includes oversight and management of program elements, technical consulting to ensure project alignment and success, and administrative functions to facilitate smooth communication and coordination among team members. The solicitation was posted on May 19, 2026, with no designated set-aside status indicated.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Central Kitting & Logistics SupportThe contract involves managing central kitting activities, which encompass the assembly, packaging, and distribution of technical components essential for deployment. It is a subcontract under the Department of the Navy, part of the Department of Defense, with a focus on logistics support to ensure efficient handling and delivery of these components. The place of performance is specified as St James, and the contract aligns with the NAICS code 493190, indicating its relevance to freight transportation arrangement services. Although no solicitation number or set-aside type is provided, the contract's purpose centers on supporting military logistics by streamlining the preparation and distribution of critical technical kits.

Other Warehousing and Storage

POSTED

DEADLINE

Test & Evaluation (T&E) SupportThe contract involves providing research, development, testing, and evaluation support services, specifically focusing on activities such as live testing, including Sonobuoy Lot Acceptance Testing, conducted at operational ranges. The work is part of a subcontract awarded by the Department of the Navy under the Department of Defense, aligned with the NAICS code 541320, which pertains to engineering services. The primary location for performance is in St James, although further location details are not specified. This contract aims to support critical test and evaluation phases that ensure the functionality and reliability of defense equipment, specifically sonobuoys, which are essential for naval operations. While details such as the solicitation number, specific contract dates, and point of contact are not provided, the emphasis on live testing indicates the contract’s importance in delivering validated, operational-ready technologies for military use.

Landscape Architectural Services

POSTED

DEADLINE

Systems Engineering & Integration (SE&I)The contract involves lead systems integration (LSI), systems engineering, and technical planning specifically for naval aviation systems, executed under the oLSI model. It focuses on delivering comprehensive engineering and integration services to support advanced naval aviation capabilities, ensuring that all system components work seamlessly together. This subcontract, titled "Systems Engineering & Integration (SE&I)," is issued by the Department of the Navy within the Department of Defense. The work is primarily to be performed in St. James, and falls under the NAICS code 541330, which pertains to engineering services. The contract was posted on May 19, 2026, and is geared toward enhancing the operational effectiveness and technical readiness of naval aviation systems through detailed systems engineering and integration efforts.

Engineering Services

POSTED

DEADLINE

Cybersecurity for Tactical SystemsThe contract involves providing cybersecurity support specifically for tactical communications, intelligence systems, and various operational platforms. The primary focus is to ensure that all cybersecurity measures meet the stringent standards set forth by the Department of Defense. This work is carried out as a subcontract under the Department of the Navy, which is part of the broader Department of Defense framework. The effort falls under NAICS code 541512, indicating a service related to computer systems design services. The work will take place in St James, although additional location details are unspecified. The contract was posted on May 19, 2026, and emphasizes adherence to federal cybersecurity requirements to protect defense-related technologies and data critical to mission success.

Computer Systems Design Services

POSTED

DEADLINE

Software Engineering & DevelopmentThis contract involves the design, development, testing, and ongoing maintenance of software systems specifically tailored for naval aviation platforms. The work focuses on mission-critical applications related to weapon systems and aircraft, ensuring reliable and efficient performance in high-stakes environments. The contract falls under the NAICS code 541511, which pertains to custom computer programming services. Issued by the Department of the Navy within the Department of Defense, the subcontract's place of performance is identified as St James, although further location details are not specified. The contract was posted on May 19, 2026, and aims to support advanced software engineering efforts critical to maintaining the operational readiness and technological edge of naval aviation assets.

Custom Computer Programming Services

POSTED

DEADLINE

Notice to Industry - Application of Cybersecurity Maturity Model Certification (CMMC) RequirementsNAVFAC Southwest is issuing an important notice to current and potential contractors regarding the implementation of the Cybersecurity Maturity Model Certification (CMMC) requirements applicable to all NAVFAC Southwest Planning, Design, and Construction Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts. Effective future contract actions will include CMMC requirements as guided by the Department of War's ongoing CMMC program rollout. Contracts and solicitations will specify when contractor information systems must handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), and will identify the required CMMC level. Contractors must have an up-to-date CMMC status recorded in the Supplier Performance Risk System (SPRS), including relevant assessments and affirmations, as a prerequisite for award of contracts, task orders, or options where CMMC applies. Beginning November 10, 2026, contractors seeking NAVFAC SW IDIQ awards must demonstrate at least a CMMC Level 2 certification validated by an accredited C3PAO. While some task orders might require a lower CMMC level, the majority of construction and architect-engineering work under NAVFAC SW contracts will necessitate this Level 2 certification or higher. To avoid disruptions in contract eligibility, contractors and subcontractors are urged to promptly access SPRS via PIEE, ensure their CMMC status is posted and accurate, and familiarize themselves with available resources and tutorials to support the certification process. This notice is informational and does not serve as a solicitation or guarantee of contract award. Points of contact are available for assistance.

Other Computer Related Services

POSTED

DEADLINE

Ongoing CMMC Compliance Monitoring & MaintenanceThe contract entails providing continuous monitoring, annual reviews, and updates to the System Security Plan (SSP) and Plan of Actions and Milestones (POA&M) to ensure sustained Cybersecurity Maturity Model Certification (CMMC) compliance and active status within the Supplier Performance Risk System (SPRS). This ongoing support is crucial for maintaining cybersecurity standards as mandated by the Department of the Navy, under the Department of Defense, specifically targeting operations based in San Diego. Classified under NAICS code 541519, the subcontract focuses on specialized cybersecurity services that ensure the contractor meets the rigorous requirements for safeguarding sensitive defense information. By regularly updating and reviewing compliance documentation, the contract supports continuous risk management and adherence to evolving CMMC standards, facilitating uninterrupted eligibility for defense contracts. The nature of this work underscores the Department of the Navy’s commitment to robust cybersecurity practices within its supply chain.

Other Computer Related Services

POSTED

DEADLINE

IT Security Implementation & Hardening ServicesThe contract, titled "IT Security Implementation & Hardening Services," involves providing technical controls necessary to meet CMMC Level 2 requirements for the Department of the Navy under the Department of Defense. Key tasks include implementing multi-factor authentication, endpoint detection and response (EDR), continuous logging and monitoring, as well as ensuring secure configuration of systems. The work is set to be performed in San Diego and falls under the NAICS code 541512, which relates to computer systems design services. This subcontract was posted on March 27, 2026, and aims to enhance cybersecurity measures within the Navy's information systems environment to protect against evolving cyber threats. It does not specify any particular set-aside type or office address details, and no specific point of contact is provided. The contract focuses on hardening IT infrastructure in compliance with recognized federal cybersecurity standards to maintain operational security and data integrity.

Computer Systems Design Services

POSTED

DEADLINE