Cybersecurity Assessment and CMMC Level 2 Certification Support

The contract seeks a small business to provide third-party Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment and certification support for systems handling covered defense information associated with the DISK ASSEMBLY component. The work involves evaluating technical and operational controls to ensure compliance with CMMC Level 2 requirements, which include safeguarding controlled unclassified information and implementing a framework of security practices and processes aligned with NIST SP 800-171. The contractor must be capable of performing on-site assessments, documenting findings, and guiding the organization through remediation and readiness activities to achieve official CMMC certification. This is a subcontract under a Total Small Business Set-Aside designation, as defined by the SBA, and is classified under NAICS code 541611 for administrative management and general management consulting services. The opportunity is managed by the Department of Defense through the DDSP NEW CUMBERLAND FACILITY, with performance required at the facility located in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on August 9, 2026, with proposals due by August 20, 2026, and is accessible through the DIBBS portal under solicitation number SPE7MC26T186S. Only qualified small businesses are eligible to respond, and the contractor must demonstrate proven experience in CMMC assessments within defense supply chain contexts.