Cybersecurity System Assessment & Audit Services

The contract seeks qualified small businesses to perform independent cybersecurity assessments of prime contractors’ information systems to validate readiness for CMMC Level 2 self-attestation, focusing on compliance with NIST SP 800-171 controls including access management, incident response procedures, media protection, and system security planning. Evaluations must be conducted objectively to confirm that the prime contractor’s systems meet required security standards before self-attestation is submitted. The work is to be performed at the designated location in Newport with a zip code of 02841 and is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside provisions, ensuring only small business concerns are eligible to bid. The solicitation was posted on April 29, 2026, and responses must be submitted by May 6, 2026, at 4:00 PM, with the North American Industry Classification System code 541618 indicating the scope of professional, scientific, and technical services related to administrative management and general management consulting. The awarding agency is the Naval Undersea Warfare Center Division Newport, a component of the Department of Defense.