Cybersecurity Compliance and CMMC Level 2 Assessment Support

The contract seeks to secure subcontracted services for achieving CMMC Level 2 compliance, focusing on the full implementation of NIST SP 800-171 security controls, development of a System Security Plan, and coordination of third-party assessments required for certification. The work is centered on ensuring the contractor’s information systems meet the cybersecurity standards mandated for handling controlled unclassified information within the Department of Defense supply chain. Services must be delivered to meet the specific technical and procedural requirements of CMMC Level 2, with attention to documentation clarity, control fidelity, and readiness for external evaluation. The contract is issued under NAICS code 541611 for management consulting services and is designated as a subcontract with performance required in Phoenix, Arizona, 85043. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026, under the umbrella of the Land Supply Chain organization within the Department of Defense. While no set-aside status is specified, the nature of the work implies eligibility for small business or specialized cybersecurity firms with demonstrated experience in CMMC frameworks and DoD compliance timelines. The offering is accessible through the DIBBS platform, and successful bidders must be prepared to deliver comprehensive compliance support under tight deadlines aligned with DoD acquisition cycles.