Cybersecurity Compliance and CMMC Self-Assessment Support

This contract seeks support for achieving CMMC Level 2 self-assessment and ensuring full compliance with NIST SP 800-171 to protect controlled unclassified information as required under DFARS regulations. The work involves guiding the contractor through the necessary cybersecurity controls, documentation, and validation processes to meet the Department of Defense’s standards for safeguarding sensitive data. The scope focuses on operational readiness and audit preparedness without external certification, emphasizing internal assessments and continuous alignment with federal cybersecurity requirements. The contract is a small business set-aside under the SBA Total Small Business Set-Aside program, classified under NAICS code 541512 for computer systems design services. It is issued as a subcontract through the Department of Defense’s LSO Combat Vehicles and Armament office, with a response deadline of July 30, 2026. Performance location details are unspecified, but the work must be conducted to meet federal compliance standards regardless of geographic location. All proposals must demonstrate expertise in cybersecurity frameworks, experience with CMMC and NIST 800-171 implementation, and a clear methodology for supporting self-assessment and compliance verification within the defense industrial base environment.