CMMC Level 2 Certification Assessment

The contract requires a third-party assessment to certify compliance with Cybersecurity Maturity Model Certification Level 2 requirements through an authorized C3PAO. The evaluation will thoroughly examine the implementation and effectiveness of security controls aligned with CMMC Level 2 standards, ensuring that all necessary safeguarding measures for Controlled Unclassified Information are properly in place and operational. Successful completion of the assessment will result in the formal issuance of CMMC Level 2 certification, confirming the organization’s adherence to the required cybersecurity practices. This subcontract is issued by the ACTIVE DEVICES DIVISION under the Department of Defense, with performance taking place in New Cumberland, Pennsylvania, 17070-5002. The North American Industry Classification System code is 541611, indicating it relates to management, scientific, and technical consulting services. Although the solicitation number and point of contact are not provided, the opportunity was posted on May 15, 2026, with a response deadline set for May 12, 2026, suggesting a possible date error or typo. Interested parties must submit their proposals through the DIBBS portal using the provided link.