Cybersecurity Compliance and CMMC Support

The contract seeks a subcontractor to assist the prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, encompassing a full spectrum of cybersecurity readiness activities. This includes conducting a thorough self-assessment against CMMC requirements, developing and refining cybersecurity policies and procedures, hardening information systems to meet defense standards, and fully implementing the controls outlined in NIST Special Publication 800-171. The scope is designed to ensure the prime contractor meets the Department of Defense’s cybersecurity mandates for handling controlled unclassified information, with an emphasis on practical, actionable compliance measures rather than theoretical frameworks. The work is tied to the DDSP New Cumberland Facility under the Department of Defense and will be performed at the location with ZIP code 17070-5002. This is a subcontract opportunity under NAICS code 541512, which classifies it within computer systems design and related services. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. While no set-aside classification is specified, the requirement is clearly geared toward supporting defense sector cybersecurity obligations, and the prime contractor is expected to leverage the subcontractor’s expertise to bridge any gaps in their current security posture and attain the necessary certification level.