Cybersecurity and CMMC Compliance Support

The contract requires support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance and adherence to NIST SP 800-171 standards to protect covered defense information as mandated by DFARS 252.204-7012. This effort involves conducting a comprehensive self-assessment to evaluate current cybersecurity practices, identifying gaps in safeguarding controlled unclassified information, and implementing necessary controls to meet federal requirements for defense contractors. The scope includes documentation, policy development, employee training, and system hardening aligned with the CMMC framework to ensure readiness for third-party assessment. This is a subcontract under the Department of Defense with a NAICS code of 541512, indicating information technology services focused on cybersecurity consulting and implementation. The solicitation was posted on July 20, 2026, with a response deadline of July 27, 2026, and is being managed through the DIBBS platform. The place of performance details are not specified, but the work must be performed in a manner that supports the defense supply chain’s cybersecurity posture. The successful contractor will be expected to deliver a fully documented compliance program that can withstand audit and verification processes under the CMMC framework.