Cybersecurity Compliance Support (CMMC Level 2)

This contract supports CMMC Level 2 compliance for a Department of Defense facility in New Cumberland, Pennsylvania, with a focus on enabling organizations to meet cybersecurity requirements for safeguarding covered defense information. The scope includes developing a comprehensive System Security Plan, conducting a detailed NIST SP 800-171 gap analysis to identify weaknesses in current controls, and preparing the organization for effective cyber incident reporting. Activities are designed to ensure readiness for self-assessment under the Cybersecurity Maturity Model Certification framework, with all work tailored to the specific needs of a defense contractor operating under federal protection standards. The contract is structured as a subcontract under a Women-Owned Small Business Set-Aside, with the NAICS code 541512 indicating it falls under Custom Computer Programming Services. Responses are due by July 6, 2026, following a posting date of June 25, 2026. Performance is expected at the DDSP New Cumberland Facility, and the effort is aimed at enhancing the cybersecurity posture of entities handling sensitive defense data. While no point of contact is listed, the procurement is managed through the DLA DIBBS platform, and participation is restricted to eligible women-owned small businesses meeting the set-aside criteria.