Cybersecurity Compliance and CMMC Support

The contract seeks specialized cybersecurity compliance support to achieve CMMC Level 2 readiness for systems handling Controlled Unclassified Information, with a focus on implementing the NIST SP 800-171 security requirements. The scope includes developing a comprehensive System Security Plan, documenting security controls, and preparing the organization for assessment by a Certified Third-Party Assessment Organization. All activities must align with DOD cybersecurity standards and be designed to ensure auditable, repeatable compliance across the entire technical infrastructure. This is a subcontract under the Department of Defense, originating from the Electrical Devices Division, with performance required at New Cumberland, Pennsylvania, 17070-5002. The solicitation is classified under NAICS code 541620, indicating it falls within management, scientific, and technical consulting services. Responses are due by August 14, 2026, and the opportunity is posted on the DIBBS portal. While no set-aside information is provided, the expectation is for qualified vendors to deliver proven expertise in CMMC 2.0 frameworks and a track record of successful C3PAO prep and alignment with federal cybersecurity mandates.