CMMC Level 2 Cybersecurity Compliance Support

The contract requires the implementation and validation of CMMC Level 2 cybersecurity compliance for systems handling covered defense information, with strict alignment to NIST SP 800-171 controls and full audit readiness. This includes establishing, documenting, and verifying all required security practices and processes to meet the Department of Defense’s cybersecurity standards, ensuring systems are protected against a range of threats while maintaining operational continuity. The contractor must demonstrate comprehensive documentation, employee training, incident response capabilities, and continuous monitoring to satisfy CMMC Level 2 requirements and pass any third-party assessments. This is a subcontract under a Total Small Business Set-Aside, meaning only small business concerns are eligible to respond, and it falls under NAICS code 541512 for computer systems design services. The work is performance-based with a designated place of performance in New Cumberland, PA, and the solicitation closed on July 22, 2026. The contracting office is the ASC Commodities Division within the Department of Defense, and all activities must comply with federal acquisition regulations and defense cybersecurity directives. Successful fulfillment of the contract requires technical precision, thorough recordkeeping, and the ability to sustain compliance through periodic reviews and evolving threat landscapes.