Cybersecurity Compliance (CMMC Level 2 Assessment & Maintenance)

The contract supports a prime contractor in achieving and maintaining CMMC Level 2 certification through a comprehensive suite of cybersecurity services including gap assessments, system hardening, and active coordination with a C3PAO. The scope focuses on identifying deficiencies against CMMC requirements, implementing technical and administrative controls to address those gaps, and ensuring ongoing compliance through continuous monitoring and remediation efforts. All work is tailored to meet the specific controls outlined in NIST SP 800-171 and the CMMC framework, with the ultimate goal of enabling the prime contractor to operate effectively on sensitive DoD networks. This subcontract is designated as a Total Small Business Set-Aside under SBA regulations, meaning only small businesses are eligible to respond, and it falls under NAICS code 541512 for computer systems design services. The solicitation was posted on August 5, 2026, with proposals due by August 20, 2026, and is administered by the Department of Defense’s Strategic Acquisition Program Directorate. Performance is expected to support DoD objectives related to securing controlled unclassified information across the defense industrial base, with no specific place of performance designated in the posting. The contract does not include a solicitation number but can be accessed via the provided DIBBS link for full submission details.