Cybersecurity Compliance and CMMC Self-Assessment Support

The contract supports Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment readiness for organizations within the maritime supply chain, focusing on the development of a System Security Plan (SSP) that aligns with NIST Special Publication 800-171 requirements. It includes guidance and documentation assistance to ensure compliance with federal cybersecurity standards, particularly around safeguarding controlled unclassified information, implementing security controls, and establishing procedures for reporting cyber incidents in accordance with federal mandates. The effort is intended to help subcontractors achieve and demonstrate compliance without requiring third-party certification at this stage. This subcontract is issued under the Department of Defense’s Maritime Supply Chain initiative, with performance tied to NEW CUMBERLAND, PA 17070-5002. The solicitation, posted on July 16, 2026, requires proposals to be submitted by July 27, 2026, and falls under NAICS code 541512 for Computer Systems Design Services. The work supports DOD contractors seeking to meet baseline cybersecurity expectations for handling sensitive government information, with an emphasis on practical implementation rather than external audit preparation. All deliverables must reflect accurate, actionable documentation that directly integrates NIST SP 800-171 controls into the organization’s operational framework.