Cybersecurity Compliance and CMMC Level 2 Self-Assessment Support

The contract seeks support services to assist the prime contractor in achieving and maintaining CMMC Level 2 compliance and conducting a NIST SP 800-171 assessment for the handling of covered defense information. The work will focus on implementing cybersecurity controls, documenting compliance measures, and preparing documentation to meet the stringent requirements of the Cybersecurity Maturity Model Certification framework, specifically at Level 2, which addresses moderate risk environments involving sensitive government data. The contractor is expected to provide expertise in identifying gaps, developing remediation plans, and ensuring ongoing alignment with federal cybersecurity standards throughout the contract period. Performance will be centered at New Cumberland, PA, with a response deadline of July 23, 2026, and the solicitation is classified as a subcontract under NAICS code 541512, indicating information technology services. The effort is directly tied to Department of Defense requirements and is intended to ensure that the prime contractor can securely process, store, and transmit controlled unclassified information in accordance with federal mandates. While no set-aside provisions are specified, the work is critical for sustaining eligibility to handle defense-related data and requires demonstrated knowledge of CMMC implementation frameworks and NIST 800-171 control alignment.