Cybersecurity Compliance (CMMC Level 2 Assessment Support)

The contract seeks a subcontractor to support the prime contractor in achieving CMMC Level 2 certification by aligning systems and practices with the requirements of NIST SP 800-171 for safeguarding Covered Defense Information. Key responsibilities include conducting a comprehensive assessment of current cybersecurity controls, identifying gaps, and developing a actionable Plan of Action and Milestones to address deficiencies. The subcontractor must ensure the prime contractor is fully prepared for an official CMMC audit, including documentation readiness, policy alignment, and implementation of required security measures across all relevant systems and processes. This effort is critical to maintaining compliance with Department of Defense cybersecurity standards and enabling the prime contractor to continue performing on sensitive defense contracts. The work is classified as a subcontract under NAICS code 541512, with a response deadline of August 6, 2026. Performance will revolve around delivering measurable progress toward CMMC certification, with all activities tailored to protect the confidentiality, integrity, and availability of Covered Defense Information. The contract is issued by the Land Supply Chain under the Department of Defense, reflecting the strategic importance of cyber readiness across defense supply chain partners.