Cybersecurity Compliance Implementation & Documentation

The contract requires support to the prime contractor in achieving and documenting compliance with NIST SP 800-171 Rev 1 and CMMC Level 2 cybersecurity standards. This includes conducting comprehensive gap assessments to identify deficiencies in current security controls, developing and refining the System Security Plan to align with mandated requirements, and preparing and submitting documentation to the Supplier Performance Risk System. The work is focused on ensuring all technical, operational, and administrative controls are properly implemented and documented to meet federal cybersecurity obligations for handling controlled unclassified information. The effort is scoped as a subcontract under the Department of Defense, specifically supporting the ASC SUPPLIER OPER OEM DIVISION, with performance required at NEW CUMBERLAND, PA, 17070-5002. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026. The North American Industry Classification System code is 541611, indicating the work involves management and technical consulting services related to cybersecurity compliance. All activities must be executed to meet stringent federal cybersecurity frameworks and deliverables must be accurate, complete, and audit-ready.