Cybersecurity Compliance (CMMC Level 2 Assessment Support)

The contract calls for third-party support to achieve Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance in alignment with Defense Federal Acquisition Regulation Supplement (DFARS) cybersecurity requirements, specifically for a prime contractor operating under the Department of Defense. The scope includes a comprehensive assessment of cybersecurity controls and ongoing compliance support to ensure the prime contractor meets the mandated standards for handling Controlled Unclassified Information. The work is classified as a subcontract and is tied to NAICS code 541512, indicating it involves computer systems design and related services focused on cybersecurity implementation and evaluation. The opportunity was posted on August 10, 2026, with a response deadline of August 21, 2026, and the place of performance is designated as Suffolk, Virginia, with ZIP code 23435-5000. The contracting activity falls under the Maritime Supply Chain ESOC Buys within the Department of Defense, and the procurement is administered through the DIBBS platform. While no set aside information is provided, the requirement is targeted at qualified third-party assessors with proven expertise in CMMC Level 2 frameworks, aiming to bridge gaps in the prime contractor’s cybersecurity posture and secure its eligibility to work on sensitive DoD contracts.