CMMC Level 2 Compliance & Cybersecurity Support

The contract seeks ongoing cybersecurity compliance support to achieve and maintain CMMC Level 2 certification, focusing on system hardening, audit readiness, and full alignment with NIST SP 800-171 standards. The work involves implementing and managing technical and procedural controls to ensure continuous adherence to federal cybersecurity requirements, with an emphasis on preparing for third-party assessments and sustaining compliance over time. The contractor will be responsible for identifying gaps in current security postures, applying remediation measures, and documenting all control implementations to meet CMMC criteria. This is a subcontract under the Department of Defense’s ASC Commodities Division, classified under NAICS code 541512 for computer systems design services. The opportunity was posted on July 28, 2026, with responses due by August 7, 2026. While no specific location is designated for performance, the work is expected to be conducted remotely or at the contractor’s facility, supporting the DoD’s broader objective of securing its supply chain. The subcontract nature indicates the selected entity will provide services to a prime contractor or another subcontractor involved in DoD contractual obligations.