CMMC Level 2 Compliance and Cybersecurity Support

This contract seeks support for achieving CMMC Level 2 compliance within the Department of Defense supply chain, focusing on comprehensive cybersecurity implementation across technical and procedural domains. The scope includes system hardening to meet defined security controls, development of required policies and procedures, and the creation of a System Security Plan and Plan of Action and Milestones to document compliance posture and remediation efforts. The vendor must be prepared to assist the contractor in navigating and successfully passing a third-party CMMC assessment, ensuring all technical and administrative requirements are fully met and documented in alignment with NIST SP 800-171 standards. The contract is structured as a subcontract under the NAICS code 541611, indicating it is tied to management consulting services related to administrative and general management. It is issued by the ASC Commodities Division of the Department of Defense, with performance required at a specified location in New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, leaving a narrow window for qualified parties to submit proposals. There is no set-aside designation specified, meaning the opportunity is open to all eligible entities, and the effort is critical for maintaining eligibility to handle controlled unclassified information within DoD contracts.