CMMC Level 2 Audit

Weber State University is seeking a qualified vendor to perform a full CMMC Level 2 audit for its Miller Advanced Research and Solutions Center. The work includes defining the audit scope, conducting a mock assessment, performing the formal C3PAO assessment, delivering a comprehensive report with feedback, and completing a POA&M close‑out assessment. The contract will be awarded to the lowest responsive and responsible bidder, with a one‑time purchase and the possibility of additional orders within 120 days of the initial award. Bidders must comply with Utah procurement rules, submit a signed Professional Services Agreement, and meet conflict‑of‑interest and confidentiality requirements. The sealed‑until deadline for bid submission is 29 May 2026 2:00 PM MDT. • Scope: Full CMMC Level 2 audit (scope definition, mock assessment, formal C3PAO assessment, reporting, POA&M close‑out). • Deliverables: Audit report, remediation guidance, and final close‑out documentation. • Requirements: Completion of prerequisite certifications, signed professional services agreement, insurance (minimum $1 M general liability, $3 M aggregate), and conflict‑of‑interest disclosure. • Timeline: Bid opening 5 May 2026 10:00 AM MDT; final bid deadline 29 May 2026 2:00 PM MDT; contract period up to 120 days for additional purchases. • Evaluation: Lowest responsive and responsible bid; compliance with Utah Procurement Code and university policies.