The government authority located in Virginia is seeking a qualified vendor to provide Cybersecurity Maturity Model Certification (CMMC) assessment services. The selected third-party assessment organization will be responsible for evaluating compliance across a secure enclave comprising a network architecture that supports virtual desktop infrastructure, network-attached storage with remote access capabilities, and a High Performance Computing (HPC) cluster architecture.

Additionally, the scope includes systems not connected to any networked environment, which are managed through a master system security plan with individualized addendums. The vendor will be expected to provide thorough, compliant assessments covering all aspects of the listed architectures and environments. All vendor questions regarding the RFP must be submitted by March 20, 2026.