Cybersecurity Compliance and CMMC Self-Assessment Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by conducting a self-assessment and ensuring adherence to all NIST SP 800-171 security controls designed to protect covered defense information. The work involves evaluating existing cybersecurity practices, identifying gaps in compliance, implementing necessary controls, and documenting evidence to demonstrate readiness for CMMC Level 2 certification. The contractor must have demonstrated expertise in defense-related cybersecurity frameworks and be capable of guiding an organization through the self-assessment process with precision and thoroughness. This subcontract is issued under NAICS code 541611 and is associated with the Department of Defense’s Electrical Devices Division, with performance required in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 9, 2026, and responses are due by July 20, 2026. While no set-aside type is specified, the contracting office expects qualified vendors with prior experience in CMMC and NIST SP 800-171 compliance to submit proposals that clearly outline their methodology, team qualifications, and past performance in supporting defense contractors through similar cybersecurity certification efforts.