Cybersecurity Compliance (CMMC Level 2 Support)

The contract seeks a subcontractor to support the prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, with a focus on executing a self-assessment against NIST SP 800-171 controls, documenting all required security practices and procedures, and preparing for a third-party assessment by an authorized C3PAO. The work entails a detailed alignment of existing cybersecurity frameworks with the specific requirements of CMMC Level 2, ensuring all technical and administrative safeguards are properly implemented, tracked, and validated through formal documentation and evidence collection. The goal is to enable the prime contractor to successfully pass a C3PAO audit and attain official certification. The contract is classified as a subcontract under NAICS code 541512 and is associated with the Department of Defense’s ASC Commodities Division, with performance located at Cherry Point, North Carolina, specifically at zip code 28533-5040. The solicitation was posted on July 13, 2026, and requires responses to be submitted by July 16, 2026. There is no set-aside designation specified, and the work is expected to be performed in support of defense-related cybersecurity obligations. The contract opportunity is accessible through the DIBBS portal, and successful applicants must demonstrate proven experience in CMMC compliance, NIST 800-171 implementation, and audit readiness services.