Cybersecurity Compliance (CMMC Level 2) Support

The contract supports the implementation and self-assessment of Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements to ensure compliance with NIST SP 800-171 controls for the protection of covered defense information. The work is aimed at helping the prime contractor meet federal cybersecurity standards by aligning systems, policies, and processes with the required security controls, particularly in environments handling sensitive defense data. The effort includes evaluating current cybersecurity posture, identifying gaps, and executing necessary remediation activities to achieve and maintain CMMC Level 2 certification. This subcontract is issued by the Active Devices Division within the Department of Defense, with performance expected to occur in New Cumberland, Pennsylvania, under the NAICS code 541612 for management consulting services. The solicitation was posted on August 3, 2026, and responses are due by August 14, 2026. The contract requires a thorough understanding of DoD cybersecurity frameworks and hands-on experience in implementing NIST controls within complex defense contractor environments, with the primary goal of ensuring data integrity, confidentiality, and availability in alignment with federal mandates.