CMMC Level 2 Compliance and Cybersecurity Support

The contractor will provide specialized support to enable CMMC Level 2 compliance for the prime contractor, focusing on the full implementation of NIST SP 800-171 security controls as mandated by DFARS 252.204-7012. This includes executing technical and procedural measures to secure controlled unclassified information, conducting a comprehensive self-assessment to validate control adherence, developing detailed documentation to demonstrate compliance, and establishing a robust incident response plan capable of detecting, reporting, and mitigating cybersecurity events in accordance with federal requirements. All activities must align with the CMMC framework’s maturity requirements and be performed in coordination with the prime contractor’s broader cybersecurity strategy. The support engagement is tied to a subcontract under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION, with performance obligated at 92136-3581 in San Diego. The solicitation was posted on August 4, 2026, and responses are due by August 12, 2026, with the North American Industry Classification System code 541512 indicating IT services and custom software development as the primary scope. The nature of the work requires deep familiarity with DoD cybersecurity regulations, documented experience in CMMC readiness, and the ability to deliver actionable, auditable outcomes within a strict federal compliance timeline.