Cybersecurity Compliance & CMMC Self-Assessment Support

The contract requires comprehensive support for achieving CMMC Level 2 self-assessment compliance, ensuring all systems that handle covered defense information meet the technical and procedural requirements outlined in NIST SP 800-171. This includes implementing the necessary security controls, documenting policies and procedures, conducting internal assessments, and maintaining readiness for CMMC evaluation. The contractor must also establish and validate robust incident reporting mechanisms to promptly detect, respond to, and report cybersecurity incidents involving covered defense information, aligning fully with federal defense cybersecurity mandates. The work is to be performed at a designated location in New Cumberland with a zip code of 17070-5002, under a subcontract structure issued by the Department of Defense through LAND SUPPLIER OPNS ENGINES. The solicitation, identified under NAICS code 541512 for computer systems design services, was posted on July 16, 2026, with responses due by July 27, 2026. All efforts must be focused on achieving and sustaining compliance, with an emphasis on operational readiness to support defense supply chain cybersecurity standards without delay.