CMMC Level 2 Cybersecurity Assessment and Compliance

The contract requires performing a CMMC Level 2 cybersecurity assessment to ensure compliance with NIST SP 800-171 standards for protecting controlled unclassified information (CUI). This subcontract opportunity is posted by the Department of Defense's ASC Supplier Operations AE and AF Division, with the work to be performed in New Cumberland, ZIP code 17070-5002. The assessment focuses on meeting federal cybersecurity mandates relevant to defense contractors, specifically aligning with the Cybersecurity Maturity Model Certification (CMMC) framework level 2 requirements. The solicitation was publicly posted on May 22, 2026, and responses are due by May 28, 2026, indicating a short turnaround for submissions. The contract falls under the NAICS code 541512, which pertains to computer systems design services. While there are no set-aside designations or specific organization types required, the opportunity is linked to a Department of Defense initiative emphasizing cybersecurity readiness and compliance. Interested parties can access the solicitation details through the provided DoD procurement portal link.