Cybersecurity Compliance (CMMC Level 2 and NIST SP 800-171)

This contract involves conducting a CMMC Level 2 assessment through a certified Third Party Assessment Organization (C3PAO) and implementing the required NIST SP 800-171 security controls on systems that handle covered defense information. The work is aimed at ensuring cybersecurity compliance in accordance with Department of Defense standards. The subcontract opportunity is posted by the ASC Commodities Division of the Department of Defense and relates to NAICS code 541330, indicating professional, scientific, and technical services. The contract requires the completion of the security assessment and implementation within a tight timeframe, with proposals due by June 4, 2026. Performance will occur in New Cumberland, with the primary goal of safeguarding sensitive defense-related data by meeting the mandated cybersecurity maturity model requirements. This subcontract represents an essential step in protecting defense information systems against cyber threats through the application of standardized federal cybersecurity frameworks.