Cybersecurity Compliance and CMMC Level 2 Assessment Support

The contract supports the achievement and maintenance of CMMC Level 2 certification through comprehensive cybersecurity measures, including system hardening and the development of required documentation to meet C3PAO assessment standards. This effort is focused on ensuring compliance with Department of Defense cybersecurity requirements by implementing technical controls and organizational policies aligned with the CMMC framework. All activities are scoped to prepare the system and workforce for a formal third-party assessment, with emphasis on both technical readiness and audit trail documentation. The contract is structured as a subcontract under the Department of Defense’s Fluid Handling Division, with a primary place of performance in Bremerton, Washington, 98314-6001. It falls under NAICS code 541512 for Computer Systems Design Services and was posted on August 6, 2026, with responses due by August 13, 2026. The effort is targeted at organizations capable of delivering mature cybersecurity practices and documentation that meet federal defense standards, with no specific set-aside designation indicated. All work must be completed in alignment with CMMC guidelines and culminate in a successful assessment outcome.