Cybersecurity Compliance (CMMC Level 2 Assessment)

The contract requires support to the prime contractor in achieving CMMC Level 2 certification through engagement with a Certified Third-Party Assessment Organization, focusing on a comprehensive system assessment and the development of required cybersecurity documentation. This effort is critical for meeting the Department of Defense’s cybersecurity standards and ensuring compliance with federal requirements for handling controlled unclassified information. The work will involve preparing systems, policies, and procedures for evaluation by the C3PAO, identifying gaps in current controls, and implementing necessary remediations to satisfy the 110 security requirements of CMMC Level 2. Performance is to be conducted at Fort Riley, Kansas, with a strict submission deadline of August 7, 2026, and the solicitation was posted on July 27, 2026. The contract is classified as a subcontract under the NAICS code 541611 for Management Consulting Services, and it falls under the purview of the Land Supply Chain within the Department of Defense. No specific set-aside provisions are indicated, and the effort is expected to be executed by a qualified contractor with demonstrated experience in CMMC compliance, cybersecurity assessments, and defense supply chain security protocols.