CMMC Certification and Oversight Services

The University of South Carolina seeks qualified C3PAO organizations to deliver consulting services enabling the university to achieve and maintain CMMC Level 2 certification. The contract will cover all phases of readiness, including gap analysis, remediation planning, implementation support, and ongoing oversight to sustain compliance. Bidders must adhere to the maximum hourly rates detailed in the solicitation’s bidding schedule. • Scope includes cybersecurity assessment, policy development, and staff training to meet CMMC Level 2 requirements. • Deliverables: gap analysis report, remediation roadmap, implementation support, and periodic compliance oversight. • Contractor must be an accredited C3PAO and provide services on a time‑and‑materials basis within stipulated hourly rates.