Cybersecurity Compliance & CMMC Implementation Support

The contract seeks support for achieving and maintaining CMMC Level 2 compliance under the Department of Defense’s cybersecurity framework, with a focus on executing self-assessments, submitting System for Award Management Performance and Risk Summary (SPRS) data, developing comprehensive cybersecurity policies aligned with NIST SP 800-171, and delivering employee training on DFARS requirements for cyber incident reporting. Services will be delivered to ensure the organization meets all mandatory controls and documentation standards necessary for CMMC Level 2 certification, with an emphasis on practical implementation and readiness for audits. Work is to be performed at the Crane location in Indiana, and the subcontract is managed by the Naval Surface Warfare Center, Crane Division. The solicitation was posted on July 29, 2026, with a firm response deadline of August 5, 2026, and falls under the NAICS code 541611 for Management, Scientific, and Technical Consulting Services. The effort requires expertise in defense cyber compliance, including a clear understanding of the CMMC framework, DFARS clause 252.204-7012, and the ability to guide internal teams through documentation, training, and reporting obligations without external oversight.