CMMC Compliance Bid

Background
The University of North Dakota (UND) is seeking a qualified partner to support its efforts toward achieving Cybersecurity Maturity Model Certification (CMMC) compliance. The goal of this contract is to ensure that UND meets the necessary cybersecurity standards required for federal research environments.

Work Details
The initial engagement will focus on conducting a comprehensive gap assessment against CMMC Level 2 requirements. Deliverables include a detailed roadmap, Plan of Action and Milestones (POA&M), and scoping recommendations for a defined CMMC enclave.

Following the assessment, the selected partner will provide implementation support to address identified gaps, assist in building a fully compliant System Security Plan (SSP), and guide the university through the necessary steps to establish and maintain a CMMC-compliant environment. The university seeks a collaborative approach with a partner experienced in higher education and federal research environments, who can provide both strategic and technical expertise throughout the readiness process.

Period of Performance
The contract period begins on August 4, 2025, with an expected completion date by August 30, 2025.

Place of Performance
The services will be performed at the University of North Dakota's facilities.

Bidder Requirements
Bidders must demonstrate experience in higher education and federal research environments. There are no specific set-aside certifications or prerequisites mentioned for this bid.