USNH Cybersecurity Maturity Model Certification Auditor

The University System of New Hampshire (USNH) is seeking a qualified firm to conduct a formal, independent CMMC Level 2 assessment to verify compliance and support certification for handling Controlled Unclassified Information (CUI) across all USNH campuses. The selected firm will be responsible for conducting an independent assessment, reviewing evidence and system configurations, and providing a formal certification decision. The assessment will be conducted at the University of New Hampshire, located in Durham, NH, and the audit completion deadline is June 30, 2026. • The assessment will cover all USNH campuses, including Keene State College, Plymouth State University, and the University of New Hampshire. • The selected firm will be required to conduct an independent, formal CMMC Level 2 assessment to verify that all required controls are implemented. • The firm will review USNH's evidence, including prepared documentation and supporting artifacts, and review system configurations, technical settings, and operational practices. • The firm will provide a formal CMMC Level 2 assessment, an assessment plan, and a final certification decision. • The firm will be required to work with Nimbus Logic on scheduling and coordination of audit needs, along with USNH.