Cybersecurity Compliance (CMMC Level 2) Assessment Support

The contract seeks a small business to provide third-party assessment and compliance support for CMMC Level 2 certification, specifically focused on the handling of Covered Defense Information in accordance with NIST SP 800-171 and DFARS requirements. The work is intended to ensure that systems and processes meet the cybersecurity standards necessary to protect sensitive defense data, with the assessment confirming adherence to the 110 security controls outlined in NIST SP 800-171. The contractor must demonstrate expertise in evaluating current cybersecurity postures, identifying gaps, and providing actionable remediation strategies aligned with CMMC Level 2 objectives. This subcontract is a total small business set-aside under the SBA program, meaning only firms certified as small businesses are eligible to respond. The North American Industry Classification System code is 541512, indicating the work involves computer systems design and related services. Performance of the contract will be centered at the New Cumberland location with a zip code of 17070-5002. Proposals must be submitted by the deadline of July 23, 2026, and the solicitation is managed by the Department of Defense through its DDSP New Cumberland Facility. Participation requires a thorough understanding of DoD cybersecurity frameworks and the ability to deliver assessments that satisfy federal compliance obligations for defense contractors.