Cybersecurity Compliance and CMMC Assessment Support

This contract requires the provision of CMMC Level 2 third-party assessment services and comprehensive NIST SP 800-171 compliance support for systems that process, store, or transmit controlled unclassified information in accordance with DFARS requirements. The work is scoped to ensure that the contractor’s systems meet the cybersecurity standards necessary to safeguard federal contract information, with a focus on achieving and maintaining CMMC Level 2 certification through rigorous evaluation, gap analysis, remediation guidance, and documentation assistance. The assessment must be conducted by an accredited third-party assessment organization and must align with the full scope of NIST SP 800-171 controls as mandated for defense subcontractors handling sensitive data. The contract is issued as a subcontract under the Department of Defense’s Land Supply Chain program, with performance requirements centered at New Cumberland, Pennsylvania, 17070-5002. It is categorized under NAICS code 541611 for management consulting services and was posted on July 21, 2026, with responses due by August 3, 2026. The effort demands proven expertise in DoD cybersecurity frameworks, demonstrated experience in CMMC assessments, and the ability to deliver tailored compliance solutions that address organizational weaknesses while ensuring audit readiness. Successful performance will include detailed reporting, evidence collection, and ongoing support to maintain compliance throughout the contract period.