Cybersecurity Compliance & CMMC Implementation Support

This contract involves providing support to the prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, which is critical for securing controlled unclassified information within the Department of Defense supply chain. The scope includes conducting an assessment aligned with NIST Special Publication 800-171 requirements, as well as development of a System Security Plan (SSP) and a Plan of Action and Milestones (POA&M) to address any identified gaps. The work is to be performed as a subcontract under NAICS code 541512, which pertains to computer systems design services. The contracting agency is the ASC Commodities Division within the Department of Defense. The place of performance is located in San Diego, zip code 92136-3581. The solicitation was posted on May 22, 2026, with responses due by May 28, 2026, indicating a relatively short turnaround for submission. This opportunity focuses on ensuring compliance with federal cybersecurity standards necessary for DoD contractors, emphasizing thorough assessment and documentation to support the prime’s certification efforts.