Cybersecurity Compliance Implementation & Assessment

The contract involves implementing cybersecurity measures aligned with NIST SP 800-171 Rev 1 controls to enhance the security posture of the client, which is the Department of Defense's ASC Commodities Division. Key responsibilities include the development and ongoing maintenance of a System Security Plan (SSP), performing a self-assessment using the Supplier Performance Risk System (SPRS), and providing support to achieve CMMC Level 2 certification readiness, all aimed at ensuring compliance with DoD cybersecurity requirements. This subcontract opportunity, listed under NAICS code 541611, is based in New Cumberland, with a deadline for responses set for May 20, 2026. The contract’s focus is on ensuring the subcontractor’s systems meet stringent cybersecurity standards necessary for handling sensitive DoD information. By adhering to the specified controls and readiness processes, the contractor will help the DoD organization mitigate risks associated with cyber threats and maintain compliance with federal mandates. The effort supports the broader goal of securing defense supply chains through verified cybersecurity practices and certification readiness initiatives.