Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

This contract seeks a small business subcontractor to support a prime contractor or supplier in completing a CMMC Level 2 self-assessment for the handling of covered defense information in accordance with DFARS 252.204-7008 and NIST SP 800-171 requirements. The scope of work involves providing expert guidance and documentation support to ensure the organization meets the cybersecurity controls outlined in NIST SP 800-171 and aligns with the Cybersecurity Maturity Model Certification framework at Level 2. The effort is critical to demonstrating compliance with Department of Defense standards for protecting sensitive information within the defense industrial base. The contract is posted as a total small business set-aside under FAR 19.5 and falls under NAICS code 541611 for management consulting services. It is issued by the Department of Defense through LSO Combat Vehicles and Armament, with a response deadline of August 10, 2026. The performance location and point of contact details are not specified, but the work is expected to be conducted remotely or at the supplier’s facility to support assessment readiness. Contractors must demonstrate proven experience in CMMC compliance, NIST 800-171 implementation, and defense contracting cybersecurity requirements to be considered for award.