Cybersecurity Compliance & CMMC Assessment Provider

The contract requires a subcontractor to perform a CMMC Level 2 self-assessment and demonstrate full compliance with NIST SP 800-171 standards to protect covered defense information tied to the underlying work. The assessment must validate that all required security controls are properly implemented, documented, and maintained to meet the cybersecurity requirements for handling sensitive federal data. The effort is scoped to ensure the subcontractor’s systems and processes adhere to the mandatory framework, with the goal of achieving and sustaining CMMC Level 2 certification as a prerequisite for continued participation in the defense supply chain. The solicitation is issued by the Active Devices Division within the Department of Defense and is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002. Proposals must be submitted by July 20, 2026, with the opportunity posted on July 9, 2026. While no specific set-aside designation is identified, the work is tied to a federal defense contract, requiring the vendor to be capable of handling controlled unclassified information in alignment with DoD cybersecurity mandates. All work must be executed in accordance with the technical and compliance expectations outlined in the referenced CMMC and NIST guidance.