Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support to achieve and maintain CMMC Level 2 certification by ensuring full alignment with NIST SP 800-171 security controls, including access control, authentication, and media sanitization, as well as comprehensive system assessment and documentation development. Work will focus on identifying gaps in current cybersecurity practices, implementing necessary controls, and preparing for third-party assessments required for certification. The effort is intended to enable the contractor to demonstrate sustained compliance with federal cybersecurity standards for handling controlled unclassified information. This is a subcontract under a Total Small Business Set-Aside, as defined by the SBA, and is classified under NAICS code 541512 for computer systems design services. It was posted on April 27, 2026, with a deadline for responses set for May 27, 2026, at 9:00 PM Eastern Time. The contracting activity is under the Department of Defense through DLA Land Warren, though no specific performance location or point of contact is provided. All work must be performed by a small business entity meeting the SBA’s size standards for the referenced NAICS code.