CMMC Level 2 Assessment and Compliance Support

The contract seeks support for achieving CMMC Level 2 compliance through a full suite of readiness services including gap analysis, documentation development, and coordination with a certified third-party assessment organization to facilitate successful certification. The work is aimed at ensuring the contractor meets the Department of Defense’s cybersecurity requirements as outlined by the CMMC framework, with a focus on safeguarding controlled unclassified information in alignment with NIST SP 800-171. The effort requires detailed planning, implementation of required security controls, and ongoing communication with the C3PAO to prepare for and pass an official assessment. The assignment is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside program, with eligibility restricted to small businesses as defined by NAICS code 541512 for computer systems design services. Performance is expected to occur at Hill Air Force Base, Utah, with a submission deadline of August 13, 2026, and the solicitation was posted on August 5, 2026. The contracting activity is managed by the ASC Commodities Division under the Department of Defense, emphasizing the importance of timely, accurate, and compliant delivery to support national security infrastructure.