Cybersecurity Compliance & CMMC Assessment Support

The contract seeks support for achieving CMMC Level 2 certification through comprehensive implementation of NIST SP 800-171 security controls, development of required cybersecurity policies and procedures, and active coordination with a C3PAO to facilitate the official assessment process. The work involves aligning organizational practices with federal cybersecurity standards to ensure compliance, documenting controls, conducting gap analyses, and preparing for the rigorous certification audit required under the CMMC framework. This subcontract is issued under NAICS code 541512 for Computer Systems Design Services and is Performance-based with a place of performance in New Cumberland, Pennsylvania, with a response deadline of August 17, 2026. The contracting entity is the Department of Defense under LAND SUPPLIER OPNS VEHICLE SPT, and the solicitation is managed through the DIBBS system. Successful proposers must demonstrate expertise in NIST 800-171 implementation, cybersecurity policy creation, and experience engaging with accredited third-party assessment organizations to deliver a fully compliant and audit-ready cybersecurity posture.