Cybersecurity Compliance Assessment (CMMC/NIST SP 800-171)

The contract requires a cybersecurity assessment to ensure compliance with NIST SP 800-171 and to support certification for CMMC Level 2 under a subcontract arrangement with the Department of Defense’s Strategic Acquisition Program Directorate. The work is focused on evaluating and aligning the prime contractor’s information systems and security controls with the technical and procedural requirements of NIST SP 800-171, while also preparing the organization for successful CMMC Level 2 certification, which involves validating the implementation of 110 security practices across people, processes, and technology. The assessment includes gap analysis, documentation review, control validation, and remediation support to meet federal cybersecurity standards. The solicitation is open for responses until May 13, 2026, with the opportunity posted on May 8, 2026, and falls under NAICS code 541611, which categorizes management, scientific, and technical consulting services. The place of performance and specific contact details are not provided, but the work is expected to be performed in support of a federal defense contractor and may involve on-site or remote activities depending on the prime contractor’s infrastructure. This subcontract is critical for enabling the prime contractor to maintain eligibility for DoD contracts requiring CMMC Level 2 compliance, making timely and thorough execution of the assessment imperative.