Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for achieving CMMC Level 2 compliance through a comprehensive self-assessment process, requiring detailed documentation, system hardening, and full adherence to NIST SP 800-171 and DFARS 252.204-7012 standards for protecting covered defense information. The effort involves implementing technical and procedural controls to meet cybersecurity requirements established for contractors handling sensitive defense data, with a focus on readiness for third-party evaluation. The work must be performed at Tobyhanna, Pennsylvania, and is structured as a subcontract under a total small business set-aside, ensuring eligibility is restricted to small businesses as defined by the SBA. The solicitation is categorized under NAICS code 541512 for computer systems design services and is managed by the Department of Defense under the Aviation Supply Chain office. Proposals must be submitted by August 4, 2026, with the opportunity publicly posted on July 27, 2026. While no specific point of contact is listed, interested parties can access additional details through the DIBBS portal using the provided link. The scope emphasizes practical, actionable steps toward compliance rather than advisory services, requiring hands-on implementation and validation of security controls aligned with federal defense cybersecurity mandates.