Cybersecurity Compliance and CMMC Assessment Support

This contract supports cybersecurity compliance for systems handling Controlled Unclassified Information through full CMMC Level 2 readiness services, including implementation of NIST SP 800-171 security controls, development of a detailed System Security Plan, and execution of a self-assessment to validate compliance. The work is focused on ensuring that the contractor’s information systems meet the technical and procedural requirements necessary to achieve CMMC Level 2 certification, which is mandatory for defense contractors processing or storing CUI. The scope requires hands-on guidance in aligning organizational policies, technical controls, and documentation with federal standards to prepare for eventual third-party assessments. The contract is structured as a subcontract under a Total Small Business Set-Aside, meaning only small businesses certified by the SBA are eligible to respond. It falls under NAICS code 541512 for Computer Systems Design Services and is issued by the Department of Defense under LSO COMBAT VEHICLES AND ARMAMENT. Performance is required at the specified location in New Cumberland, Pennsylvania, with a response deadline of August 3, 2026. The solicitation remains open until that date, and successful bidders will be tasked with delivering comprehensive compliance documentation and operational readiness support tailored to the defense environment, ensuring the system architecture and processes sustain ongoing CMMC Level 2 compliance.