RFP_37097-OT_ Cyber Security Maturity Model Certification Assessment (level 2)

Background
The University of Maryland, College Park is seeking proposals from qualified contractors to provide Cyber Security Maturity Model Certification Assessment (CMMC) Level 2 services. This procurement aims to obtain assessment services for two separate information systems implemented as distinct Azure Government GCC High tenants, referred to as Tenant A and Tenant B. The University, recognized as the State's flagship university and a leading public research institution, requires secure IT environments to support its extensive research and academic programs.

Work Details
The selected contractor will perform CMMC Level 2 certification assessments for two distinct Azure Government GCC High tenants. The assessment will evaluate the implementation of 110 security requirements from NIST SP 800-171 Revision 2. Key deliverables include:

- Conducting kickoff meetings
- Finalizing assessment scope documentation
- Providing an Evidence Request List (ERL)
- Executing certification assessments for both tenants
- Delivering final assessment reports

The contractor must also address hybrid environment considerations and propose efficiencies due to identical tenant configurations while maintaining independence in the assessment process.

Period of Performance
The contract performance period is not explicitly stated in the provided text but includes a timeline for proposal submission and assessment activities that will be finalized during the kickoff meeting.

Place of Performance
The assessments will be conducted at two locations:

- 4600 River Road, College Park, MD 20737
- 7005 52nd Ave, College Park, MD 20740.

Bidder Requirements
Contractors must be authorized C3PAOs capable of performing Level 2 certification assessments. They should demonstrate experience with hybrid Microsoft/Azure environments, provide a team of credentialed assessors, and ensure compliance with confidentiality and data handling requirements. Additionally, all personnel assigned must be U.S. citizens.