CMMC Level 2 Compliance Support

The contract seeks cybersecurity consulting and implementation services to achieve CMMC Level 2 compliance, with a focus on aligning systems with NIST SP 800-171 requirements and developing a comprehensive system security plan. The work involves assessing existing cybersecurity controls, identifying gaps, implementing necessary remediations, and documenting policies and procedures to satisfy the CMMC framework’s criteria for handling controlled unclassified information. This engagement is critical for organizations supporting the Department of Defense that require certification to maintain eligibility for secure contracts. The solicitation is issued as a subcontract under the NAICS code 541512 for other computer-related services and is managed by the ASC COMMODITIES DIVISION within the Department of Defense. Proposals must be submitted by August 3, 2026, with performance expected to take place in San Diego, California, at the ZIP code 92136-3581. The contract does not specify a set-aside designation, and while no point of contact is listed, interested parties can access additional information via the provided DIBBS link. Compliance with all CMMC Level 2 requirements and documentation standards is mandatory for successful contract execution.