CMMC Level 2 Cybersecurity Compliance and Assessment

The contract seeks implementation and validation of cybersecurity controls to achieve CMMC Level 2 compliance for the protection of Controlled Unclassified Information on contractor systems, encompassing a full gap assessment and support through the certification process. This effort is critical for ensuring that all required safeguards are properly deployed, tested, and documented to meet the Department of Defense’s mandated standards for handling CUI. The work will focus on aligning existing systems and processes with the specific controls outlined in CMMC Level 2, with an emphasis on readiness for third-party assessment and certification. The procurement is structured as a subcontract under the NAICS code 541512 for computer systems design services, with performance required at New Cumberland, Pennsylvania, ZIP code 17070-5002. The solicitation was posted on July 6, 2026, and responses are due by July 14, 2026. The contracting office is the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense, and the work is intended to support defense supply chain security by ensuring subcontractors meet uniform cybersecurity requirements. All proposals must demonstrate technical expertise in CMMC frameworks, experience with CUI environments, and a clear methodology for gap analysis, control implementation, and certification preparation.