Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for achieving CMMC Level 2 compliance, specifically focusing on conducting a comprehensive assessment against NIST SP 800-171 requirements, implementing necessary system safeguards to protect controlled unclassified information, and establishing protocols for DFARS 252.204-7012 incident reporting. The work is tied to ensuring the contractor's information systems meet federal cybersecurity standards for handling sensitive defense data, with an emphasis on both technical controls and procedural readiness for compliance audits. The effort must align with the requirements of the Department of Defense and be performed in New Cumberland, Pennsylvania, with a zip code of 17070-5002. This is a subcontract opportunity under NAICS code 541512, which categorizes it under Computer Systems Design Services, and it is posted under the Land Supplier Operations Engines organization within the Department of Defense. Proposals must be submitted by July 27, 2026, and the solicitation is accessible through the DIBBS platform. There is no set-aside designation specified, indicating the opportunity is open to all qualifying vendors. Contractors must be prepared to deliver a fully compliant cybersecurity posture, including documentation, training, and ongoing monitoring capabilities to sustain CMMC Level 2 certification, with all deliverables directly supporting the defense supply chain’s security framework.