Cybersecurity Compliance (CMMC Level 2 Assessment)

The contract requires a third-party assessment and support service to achieve and maintain CMMC Level 2 compliance for the protection of covered defense information, aligning with the technical safeguards outlined in NIST SP 800-171 and the contractual requirements of DFARS 252.204-7012. The work is focused on evaluating and assisting the prime contractor’s cybersecurity posture to ensure all controls are properly implemented, documented, and continuously monitored to meet Department of Defense standards for handling sensitive unclassified information. The assessment must be conducted by an accredited CMMC third-party assessment organization and must result in a valid CMMC Level 2 certification. This subcontract is set aside exclusively for small businesses under the SBA’s Total Small Business Set-Aside program, with the NAICS code 541611 designating the primary business activity as management, scientific, and technical consulting services. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002, indicating on-site or local support may be necessary. Interested parties must submit responses by the deadline of July 27, 2026, and the solicitation was publicly posted on July 14, 2026, under the DIBBS platform. The contracting activity originates from LSO Combat Vehicles and Armament within the Department of Defense, and the work will directly support the security infrastructure required for defense-related contracts.