Cybersecurity and CMMC Compliance Support

The contract calls for comprehensive cybersecurity support to achieve CMMC Level 2 readiness for systems handling Controlled Unclassified Information, including conducting a detailed NIST SP 800-171 gap analysis to identify compliance deficiencies and developing or updating System Security Plans and Plans of Action and Milestones to address identified weaknesses. The work is critical to ensuring the prime contractor meets federal cybersecurity requirements for safeguarding CUI and must be executed in alignment with DoD standards, targeting full compliance with the CMMC framework by the project’s conclusion. All activities are to be performed in support of systems located at New Cumberland, Pennsylvania with a zip code of 17070-5002. The contract is classified as a subcontract under NAICS code 541330 for Scientific and Technical Consulting Services and is issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. The response deadline is set for July 20, 2026, with the solicitation posted on July 12, 2026, indicating a limited window for proposals. The place of performance is fixed in New Cumberland, and all deliverables must be tailored to the prime contractor’s specific systems, environments, and operational constraints without reference to external documentation or file-based citations. The effort is mission-critical for maintaining the organization’s ability to secure federal contracts requiring CMMC Level 2 compliance.