Cybersecurity Compliance (CMMC Level 2 Assessment)

The contract seeks a qualified small business to perform a CMMC Level 2 third-party assessment and provide comprehensive compliance support for systems handling Covered Defense Information. The work is focused on ensuring adherence to the Cybersecurity Maturity Model Certification requirements at Level 2, which includes evaluating security controls, documenting compliance posture, and assisting the contractor in addressing gaps to meet DoD standards. The contract is structured as a subcontract under a Total Small Business Set-Aside, restricted exclusively to small businesses as defined by the SBA, and falls under the NAICS code 541612 for management consulting services. Performance is required at the location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026, with the prime organization being the Department of Defense under the Land Supply Chain division. The contract environment demands rigorous cybersecurity expertise, precise documentation, and direct engagement with systems that process, store, or transmit sensitive defense data. While no point of contact is listed, the official RFQ can be accessed via the DIBBS portal at the provided URL. Successful bidders must demonstrate proven experience in CMMC Level 2 assessments, understanding of NIST SP 800-171 controls, and the ability to deliver actionable compliance strategies to meet DoD contractual obligations.