Cybersecurity and IT Compliance Support

The contract seeks specialized support for implementing and maintaining cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST SP 800-171 requirements and to achieve readiness for CMMC Level 2 certification. This effort is focused on ensuring robust protection of sensitive data through comprehensive technical and administrative controls, continuous monitoring, risk assessments, and compliance documentation aligned with federal cybersecurity standards. The work will be performed at the New Cumberland facility with a zip code of 17070-5002, and the contractor must demonstrate expertise in managing CUI within a DoD environment, including policy development, system hardening, incident response readiness, and audit preparation. This is a total small business set-aside subcontract under NAICS code 541512, reserved exclusively for businesses certified as small by the SBA. The solicitation was posted on July 28, 2026, with a response deadline of August 10, 2026, and is managed by the Department of Defense through the DDSP New Cumberland Facility. The contractor will be expected to provide ongoing maintenance and adaptive security measures to address evolving threats and regulatory updates, ensuring sustained compliance throughout the contract period. All deliverables must meet stringent federal cybersecurity benchmarks and support audit readiness with verifiable evidence of implemented controls and organizational security posture.