Cybersecurity Compliance Support (CMMC & NIST SP 800-171)

The contract requires support to assist the prime contractor in achieving CMMC Level 2 self-assessment certification and ensuring full compliance with NIST SP 800-171 standards for the handling of Controlled Unclassified Information. This includes implementing, documenting, and validating security controls related to CUI as mandated by federal cybersecurity requirements, with a focus on aligning systems, policies, and procedures to meet the rigorous standards of the Defense Department. The work is tied to a subcontract under the Department of Defense and centers on activities performed in New Cumberland, Pennsylvania, with a response deadline of August 14, 2026, and the solicitation issued under NAICS code 541512 for computer systems design services. The scope encompasses all technical, administrative, and compliance activities necessary to prepare for and complete the self-assessment process under the Cybersecurity Maturity Model Certification framework, ensuring the prime contractor can demonstrate adherence to NIST SP 800-171 controls during audits or evaluations. The support provider must possess demonstrated expertise in CMMC Level 2 requirements, NIST guidance, and CUI protection protocols, and be capable of working closely with the prime to remediate gaps, maintain documentation, and establish ongoing compliance practices. Although the solicitation does not specify a set-aside category, the contract is explicitly tied to defense-related cybersecurity efforts under LSO Combat Vehicles and Armament.