Cybersecurity Compliance and CMMC Assessment Support

The contract requires comprehensive cybersecurity compliance support to achieve CMMC Level 2 readiness for a prime contractor operating under the Department of Defense. This includes the full implementation of NIST SP 800-171 security controls and ensuring adherence to DFARS 252.204-7012 requirements governing the protection of covered defense information and cyber defense information systems. The scope of work involves assessing current cybersecurity posture, identifying gaps, developing remediation plans, and providing documentation and training necessary to successfully undergo a CMMC Level 2 assessment. All activities must align with federal cybersecurity standards and be executed in a manner that ensures continuous compliance and audit readiness. Performance is tied to the location of New Cumberland, Pennsylvania, with a strict response deadline of July 29, 2026, indicating a narrow window for submission and execution planning. The work is structured as a subcontract under the NAICS code 541512, which identifies it as computer systems design and related services, and falls under the Maritime Supply Chain organization within the Department of Defense. Although no specific point of contact or set-aside type is listed, the solicitation is accessible via the DIBBS platform, suggesting it is competitively sourced and intended for certified cybersecurity service providers capable of delivering end-to-end compliance solutions in a DoD-contracted environment.