Cybersecurity Compliance & Assessment Services

The contract seeks a third-party provider to deliver comprehensive cybersecurity compliance services focused on achieving CMMC Level 2 certification and submitting a formal NIST SP 800-171 assessment to the Supplier Performance Assessment Framework. This includes conducting a thorough evaluation of the contractor’s cybersecurity practices against CMMC Level 2 requirements, preparing and finalizing all required documentation, and providing full audit support to ensure readiness and compliance with Department of Defense standards. The scope encompasses gap analysis, policy and procedural alignment, evidence collection, and coordinated submission to SPAF, with an emphasis on accuracy, completeness, and adherence to federal cybersecurity protocols. The work is under a subcontract structure issued by the Electrical Devices Division of the Department of Defense, with performance expected to occur at FPO, ZIP 09556. The solicitation was posted on July 27, 2026, and responses are due by July 30, 2026, indicating a narrow window for submission. The NAICS code 541611 identifies the service category as management, scientific, and technical consulting services, specifically those related to cybersecurity and compliance. There is no set-aside designation specified, and while no point of contact is listed, the contract is accessible through the DIBBS portal via the provided UI link. Success will require a demonstrated understanding of CMMC framework implementation, NIST SP 800-171 controls, and the SPAF submission process with proven experience supporting DoD contractors.