Cybersecurity Compliance and CMMC Support

The contract seeks support for achieving and maintaining NIST SP 800-171 compliance through the development of a comprehensive System Security Plan and a Plan of Action and Milestones, ensuring alignment with federal cybersecurity requirements for controlled unclassified information. Additionally, the contractor will perform a Self-Assessment for CMMC Level 2, evaluating the organization’s security posture against the Cybersecurity Maturity Model Certification framework’s second level of maturity, which includes practices and processes from NIST SP 800-171 and additional controls. The work is focused on enabling the contracting organization to meet mandated cybersecurity standards for handling sensitive federal data. This is a subcontract opportunity under the Department of Defense, with performance to be conducted at the New Cumberland facility, zip code 17070-5002. The solicitation was posted on July 5, 2026, and responses are due by July 16, 2026. The appropriate NAICS code is 541611, reflecting management, scientific, and technical consulting services, indicating the need for expert cybersecurity advisory capabilities rather than implementation of hardware or software systems. The effort requires a deep understanding of federal cyber regulations, the ability to document security controls effectively, and the capacity to identify gaps and recommend remediation strategies for CMMC Level 2 certification readiness.