CMMC Level 2 Cybersecurity Compliance Support

This contract provides third-party cybersecurity support to prime contractors and subcontractors required to achieve CMMC Level 2 compliance for handling controlled unclassified information. The scope includes comprehensive assessment of existing cybersecurity controls, identification of gaps against CMMC requirements, and remediation services to align systems and processes with the necessary standards. Support extends to documentation, policy development, employee training, and continuous compliance monitoring to ensure sustained adherence throughout the contract lifecycle. The work is specifically targeted at entities engaged in Department of Defense supply chain activities that process or store controlled unclassified information. The contract is issued under NAICS code 541512 for computer systems design services and is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV. Performance is required at Tinker Air Force Base, Oklahoma, with a response deadline of July 20, 2026. While no set-aside status is specified, the opportunity is open to qualified vendors capable of delivering end-to-end CMMC Level 2 compliance services, including assessments, remediation, and ongoing advisory support to maintain compliance in a dynamic regulatory environment.