Cybersecurity Compliance Support (CMMC Level 2 / NIST SP 800-171)

The contract seeks to provide comprehensive cybersecurity compliance support to a prime contractor aiming to achieve CMMC Level 2 certification and full readiness for NIST SP 800-171 requirements. The scope includes conducting self-assessments to evaluate current security posture, identifying gaps in controls, and developing a robust System Security Plan that aligns with federal cybersecurity standards. This effort is critical for ensuring the prime contractor meets the Department of Defense’s mandatory cybersecurity frameworks for handling controlled unclassified information. The work will focus on implementing and documenting the 110 security controls outlined in NIST SP 800-171, with particular attention to policies, procedures, and technical safeguards necessary for CMMC Level 2 accreditation. The contract is structured as a subcontract under the NAICS code 541611, which categorizes it as management consulting services related to administrative and general management. It is sponsored by the ASC Commodities Division of the Department of Defense, with performance required at a location in New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. Although no set-aside classification is specified, the solicitation is issued through the DIBBS platform, indicating it is part of a broader DoD procurement process aimed at securing cyber-ready subcontractors to safeguard sensitive defense-related information.