Cybersecurity Compliance and CMMC Level 2 Implementation

The contract requires the implementation and thorough documentation of NIST SP 800-171 controls to achieve a CMMC Level 2 self-assessment, ensuring the protection of covered defense information and the establishment of proper cyber incident reporting procedures. This effort is focused on aligning systems and processes with federal cybersecurity standards to meet the Department of Defense’s requirements for safeguarding sensitive data. The work involves assessing current security postures, identifying gaps, deploying necessary technical and administrative safeguards, and maintaining comprehensive records to validate compliance during the self-assessment process. The contract is structured as a small business set-aside under the SBA program, specifically designated for total small business participation, with a NAICS code of 541512 indicating it relates to computer systems design services. It is issued by the Land Supply Chain office within the Department of Defense, with performance centered in New Cumberland, Pennsylvania, at the zip code 17070-5002. Interested parties must submit responses by the deadline of July 27, 2026, following the posting date of July 15, 2026, through the DIBBS portal. The nature of the work demands expertise in federal cybersecurity frameworks, experience in CMMC readiness, and the ability to produce documentation that meets DoD audit requirements.