Export Control and Defense Information Safeguarding (CMMC Support)

This contract requires comprehensive support for achieving and maintaining CMMC Level 2 compliance, with a focus on safeguarding covered defense information in accordance with NIST SP 800-171 and DFARS 252.240-93 requirements. The work involves conducting assessments to evaluate an organization’s cybersecurity posture, identifying gaps in controls, and implementing remediation strategies to meet the federal standards for protecting sensitive defense data. The contractor will be expected to provide expert guidance throughout the entire compliance process, including documentation preparation, policy development, employee training, and readiness reviews to ensure alignment with CMMC framework objectives. The contract is a subcontract under the Department of Defense and is associated with the NAICS code 541611, indicating it falls under management consulting services. Performance is centered in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002, and the solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026. Although no specific set-aside designation is indicated, the work is tied to national defense infrastructure and requires strict adherence to export control and data handling regulations. Subcontractors must demonstrate proven experience in CMMC assessments and be capable of operating in a highly secure environment to protect covered defense information from unauthorized access or disclosure.