CMMC Level 2 Cybersecurity Compliance Support

The contract seeks to implement and assess NIST SP 800-171 security controls to achieve CMMC Level 2 certification for systems that process, store, or transmit controlled unclassified information. This effort is focused on ensuring full compliance with federal cybersecurity requirements for defense contractors handling sensitive data, requiring a thorough evaluation of existing security postures, remediation of gaps, and documentation of controls to meet CMMC standards. The work must be performed by a small business as this is a total small business set-aside under SBA guidelines, and the place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation is classified as a subcontract under the NAICS code 541512, which corresponds to computer systems design and related services, indicating that the effort involves technical and consulting services rather than hardware procurement. The solicitation was posted on August 4, 2026, with a response deadline of August 12, 2026, and is managed by the ASC Commodities Division within the Department of Defense. The contract is structured under the DIBBS platform and does not specify point of contact information, suggesting that potential offerors must rely on the official solicitation portal for details and submission instructions. Failure to meet CMMC Level 2 requirements could result in non-compliance with federal contracts, making this effort critical for maintaining eligibility to work with the Department of Defense on projects involving controlled unclassified information. The subcontract nature implies the selected entity will be part of a larger contractor’s compliance chain, reinforcing the necessity of precise implementation and audit-ready documentation.