Cybersecurity Compliance (CMMC Level 2 Assessment & SPRS Submission)

The contract requires performing a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment, which involves evaluating compliance with cybersecurity practices and processes as defined under this standard. The scope includes documenting the implementation of NIST SP 800-171 controls, ensuring that the necessary security requirements for protecting controlled unclassified information are met. Following the assessment and documentation, the results must be submitted to the Supplier Performance Risk System (SPRS), a Department of Defense platform used for tracking supplier cybersecurity posture. Issued by the Department of Defense’s NSWC Crane office, this subcontract opportunity with NAICS code 541611 calls for expertise in cybersecurity compliance and government contracting. The solicitation was posted on May 14, 2026, with a response deadline of May 22, 2026. The contract does not specify set-aside requirements or detailed location information for performance. Interested parties are expected to adhere closely to the CMMC Level 2 standards and provide comprehensive, accurate documentation and reporting consistent with federal cybersecurity compliance mandates.