Cybersecurity Maturity Model Certification (CMMC) Compliance Support

The contract is a small business set-aside subcontract aimed at supporting Cybersecurity Maturity Model Certification compliance for the Pension Benefit Guaranty Corporation, under the U.S. Department of Labor. The scope requires comprehensive cybersecurity services including conducting gap assessments against NIST SP 800-171 requirements, implementing necessary security controls to protect Controlled Unclassified Information, and developing detailed System Security Plans to document security posture and controls. Preparation for third-party CMMC audits is a critical component, ensuring the entity is fully ready for evaluation and certification. The work must be performed at a location with a zip code of 20024, and all tasks are designed to meet federal cybersecurity standards for handling sensitive government information. Responses are due by July 27, 2026, and the opportunity is posted under NAICS code 541511, which identifies it as information technology services related to computer systems design.