Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract seeks a subcontractor to assist the prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance to satisfy RD004 requirements for safeguarding Controlled Unclassified Information (CUI) in accordance with NIST SP 800-171 guidelines. The support will encompass the full scope of the CMMC Level 2 self-assessment process, including documentation review, gap analysis, implementation of required security controls, and preparation of assessment evidence to ensure readiness for formal certification. The work is critical to maintaining eligibility for Department of Defense contracts that involve handling CUI, and the subcontractor must demonstrate expertise in cybersecurity compliance frameworks and DoD regulatory standards. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, and falls under NAICS code 541612 for management consulting services. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002. This is classified as a subcontract under the Maritime Supply Chain division of the Department of Defense, and the work is intended to facilitate compliance rather than conduct an independent audit or certification. The prime contractor will rely on the subcontractor's technical capabilities to align internal processes and controls with CMMC Level 2 requirements, ensuring continuous operation under federal contract obligations involving sensitive, non-classified information.