Cybersecurity Compliance (CMMC Level 2 Assessment Support)

The contract supports a prime contractor in achieving CMMC Level 2 certification by providing comprehensive cybersecurity compliance services including gap analysis, policy and procedure documentation, and readiness preparation for a C3PAO assessment. The work is focused on ensuring adherence to DFARS 252.204-7012 requirements by identifying deficiencies in current cybersecurity practices, developing necessary controls and documentation, and aligning systems and processes with the NIST SP 800-171 standards embedded in CMMC Level 2. The effort is mission-critical for maintaining eligibility to handle controlled unclassified information within the Department of Defense supply chain. Performance is centered at the New Cumberland location with a zip code of 17070-5002 under the auspices of the DDSP New Cumberland Facility, part of the Department of Defense. This subcontract is solicited under the NAICS code 541611 for Management Consulting Services and is open for response until August 3, 2026, with the solicitation posted on July 21, 2026. The intent is to secure specialized expertise to navigate the complexities of CMMC certification and ensure the prime contractor meets all federal cybersecurity obligations without delay or noncompliance risk.