Cybersecurity Compliance & CMMC Assessment Support

The contract supports achieving and maintaining CMMC Level 2 compliance for the handling of Covered Defense Information, requiring full alignment with NIST SP 800-171 and DFARS 252.204-7012 requirements. The scope includes conducting a comprehensive gap assessment to identify deficiencies in current cybersecurity controls, developing and implementing necessary documentation to close identified gaps, and ensuring audit readiness through structured policies, procedures, and evidence collection. All activities must be performed in accordance with the CMMC framework's expectations for Level 2, emphasizing the protection of CDI across all systems and processes. The work is categorized as a subcontract under NAICS code 541512, with the place of performance located in New Cumberland, Pennsylvania, under the Department of Defense's Construction & Equipment T & IFO EQ organization. The solicitation was posted on July 17, 2026, with a response deadline of July 27, 2026, indicating a tight turnaround for proposers to demonstrate capability in cybersecurity compliance support. The requirement is focused on operational readiness for third-party audits, and successful performers must bring proven experience in implementing NIST controls within defense contracting environments to ensure seamless accreditation.