Mock Assessment of New MSU Regulated Research Enclave (RFQ #883647)

Michigan State University (MSU) is seeking a Certified Third-Party Assessment Organization (C3PAO) to perform a mock assessment of their new Regulated Research Enclave (RRE) at the Cybersecurity Maturity Model Certification (CMMC) Level 2 requirement. The RRE is a NIST Special Publication 800-171 compliant environment, intended to protect projects with data that meet the classification of controlled unclassified information (CUI). The selected vendor will need to start the mock assessment in January 2026 and complete it by March 2026. • The RRE is hosted in an Azure GovCloud environment and is completely separated from the rest of MSU's IT infrastructure. • The assessment will be performed at the CMMC Level 2 requirement. • The selected vendor must be listed in the Cyber-AB Marketplace as a Certified 3rd Party Assessment Organization (C3PAO). • The vendor will need to provide a pricing quote for the assessment.