Cybersecurity Compliance and CMMC Self-Assessment Support

The contract supports the prime contractor in preparing and validating a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment for submission to the Supplier Performance Risk System (SPRS). This effort is critical to ensure compliance with DoD cybersecurity requirements for handling controlled unclassified information and must be completed in alignment with CMMC framework standards. The subcontractor will assist in documenting policies, procedures, and controls, conducting gap analyses, gathering evidence, and finalizing the self-assessment to meet federal compliance benchmarks. Work under this contract is performance-based and focused on timely delivery of an accurate, auditable self-assessment that satisfies SPRS submission criteria. The place of performance is identified as Cherry Point, North Carolina, with a response deadline of August 17, 2026, and the solicitation falls under NAICS code 541512 for Computer Systems Design Services. This subcontract supports a broader DoD objective to strengthen the supply chain’s cybersecurity posture and is part of an ongoing effort to enforce CMMC readiness across defense contractors.