Cybersecurity Compliance & Reporting Services

The contract seeks services to implement NIST SP 800-171 security controls across the organization’s information systems, ensuring alignment with federal cybersecurity standards for handling controlled unclassified information. It requires comprehensive documentation of policies, procedures, and technical safeguards to demonstrate compliance, with a focus on preparing for CMMC Level 2 certification, which includes assessing gaps, refining cybersecurity hygiene, and validating controls through internal and third-party audits. The contractor will also manage cyber incident reporting through the Department of Defense’s DIBNet portal, ensuring timely and accurate submission of incident data in accordance with federal requirements, and coordinate all aspects of third-party audit engagements including scheduling, evidence collection, and remediation planning. The scope encompasses end-to-end cybersecurity compliance activities, from initial assessment through certification readiness, with an emphasis on maintaining rigorous documentation and operational accountability throughout the contract period.