Cybersecurity Compliance (CMMC/NIST SP 800-171)

The contract focuses on providing cybersecurity compliance support to achieve CMMC Level 2 self-assessment and full adherence to NIST SP 800-171 standards for the handling of controlled unclassified information as mandated by DFARS regulations. The work is intended to ensure the contractor implements and maintains the necessary security controls required to protect sensitive government data, with an emphasis on documented processes, risk management, and audit readiness. This subcontract is scoped to support an organization operating under Department of Defense oversight at the New Cumberland facility with a ZIP code of 17070-5002, and it falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 16, 2026, with a firm deadline for responses on July 27, 2026, indicating a limited window for interested parties to submit proposals. This effort is not designated for any specific set-aside category, making it open to all eligible small and large businesses. Participation requires deep familiarity with CMMC framework requirements, experience in conducting self-assessments under the CMMC Accreditation Body, and proven ability to align technical and administrative controls with NIST SP 800-171. The place of performance is specifically tied to the New Cumberland location, implying on-site presence or direct coordination with the Defense Digital Service Provider facility is necessary to complete compliance activities successfully.