Cybersecurity Compliance and CMMC Level 2 Self-Assessment Support

The contract supports the implementation of NIST SP 800-171 security controls, requiring the successful bidder to execute a structured approach to align systems and processes with these federal cybersecurity requirements for handling covered defense information. It also encompasses conducting a comprehensive CMMC Level 2 self-assessment, which involves evaluating current security postures against the Cybersecurity Maturity Model Certification framework’s Level 2 practices to identify gaps and ensure readiness for formal third-party assessments. Additionally, the contractor must maintain ongoing compliance with cyber incident reporting obligations, ensuring timely and accurate notifications in accordance with DFARS requirements whenever a security breach or compromise is detected. The work is classified as a subcontract under NAICS code 541512 and is focused at the New Cumberland location with a zip code of 17070-5002, under the oversight of the Department of Defense’s DDSP New Cumberland Facility. The solicitation was posted on July 13, 2026, with a response deadline of July 24, 2026, indicating a tight timeline for proposal submission. While no specific set-aside designation or point of contact is provided, the nature of the work requires expertise in defense cybersecurity frameworks, hands-on experience with NIST controls, and familiarity with CMMC audit procedures to meet contractual obligations effectively.