Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by performing a self-assessment, developing a comprehensive System Security Plan, and addressing gaps identified in NIST SP 800-171 standards for the handling of controlled unclassified information. The work involves evaluating current cybersecurity practices, documenting security controls aligned with NIST guidelines, and implementing necessary remediations to meet the required maturity level for protecting sensitive federal data. This effort is critical for organizations processing or storing controlled unclassified information under Department of Defense contracts. The subcontract is issued by the ACTIVE DEVICES DIVISION under the Department of Defense, with performance required to take place in New Cumberland, Pennsylvania, at the zip code 17070-5002. The solicitation is categorized under NAICS code 541512 for Computer Systems Design Services and is open for responses through August 20, 2026, with a posting date of August 9, 2026. No set-aside designation is specified, and it is positioned as a subcontract opportunity without a publicly listed point of contact. Interested parties must review the full solicitation via the provided DIBBS link to understand full terms, deliverables, and performance expectations.