Cybersecurity Compliance and CMMC Level 2 Certification Support

The contract seeks a small business to provide comprehensive CMMC Level 2 readiness support for systems operating within the Department of Defense’s Land Supply Chain, with performance centered in New Cumberland, Pennsylvania, and a zip code of 17070-5002. The scope includes conducting a thorough system assessment to identify gaps in cybersecurity controls, developing and organizing required documentation to meet CMMC Level 2 requirements, and coordinating directly with a certified C3PAO to facilitate accurate and timely SPARS reporting. The support must align with the specific frameworks and standards of CMMC Level 2, ensuring the contractor’s systems are fully prepared for evaluation and certification. This is a total small business set-aside under FAR 19.5, with NAICS code 541512 for computer systems design services, indicating that only small business concerns eligible under SBA guidelines may respond. The solicitation was posted on July 14, 2026, with a mandatory response deadline of July 27, 2026. The subcontract is intended to enable a prime contractor or another entity to achieve and maintain CMMC Level 2 compliance, a critical requirement for handling controlled unclassified information within the defense industrial base. The successful contractor must demonstrate expertise in cybersecurity compliance, experience with CMMC frameworks, and proven ability to interface with authorized third-party assessment organizations to meet federal cybersecurity mandates.