Cybersecurity Compliance & CMMC Assessment Support

The contract seeks support for implementing NIST SP 800-171 cybersecurity controls and facilitating a third-party assessment to achieve CMMC Level 2 compliance for Department of Defense contracts. The work involves aligning organizational systems and processes with the required security practices outlined in NIST standards and preparing for an independent audit to validate readiness for CMMC Level 2 certification, which is mandatory for handling controlled unclassified information in the defense supply chain. The scope is focused on ensuring full regulatory alignment and audit readiness through expert guidance and documentation support. This subcontract is tied to the Aviation Supply Chain under the Department of Defense and requires performance at the location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 14, 2026, and responses are due by July 22, 2026. The NAICS code 541611 identifies this as an Information Technology Consulting Services engagement, indicating the need for specialized cybersecurity advisory expertise. Participation is open without set-aside restrictions, and while no point of contact is listed, interested parties must submit through the official DIBBS portal using the provided RFQ link.