Cybersecurity Compliance Support (CMMC Level 2 / NIST SP 800-171)

The contract seeks advisory and implementation support to achieve CMMC Level 2 certification and full compliance with NIST SP 800-171 for the protection of Controlled Unclassified Information. The scope encompasses guiding the contractor through the entire cybersecurity compliance process, including assessment, gap analysis, policy development, technical controls implementation, documentation preparation, and readiness reviews required for CMMC Level 2. The work is focused on ensuring that all systems and processes handling CUI meet the stringent security requirements mandated by the Department of Defense. This subcontract is issued under NAICS code 541512 for Computer Systems Design Services and is tied to performance at New Cumberland, Pennsylvania, with a response deadline of July 27, 2026. The effort is part of LSO Combat Vehicles and Armament’s broader initiative under the Department of Defense to strengthen cybersecurity posture across its supply chain. Successful bidders must demonstrate proven experience in CMMC and NIST 800-171 compliance frameworks and be prepared to deliver tailored solutions that align with federal standards, support audit readiness, and ensure sustainable compliance practices.