CMMC Level 2 Cybersecurity Self-Assessment Support

The contract supports the prime contractor in performing a CMMC Level 2 self-assessment to verify adherence to NIST SP 800-171 and DFARS cybersecurity standards, ensuring the protection of controlled unclassified information within the defense supply chain. The work is scoped explicitly to assist with evaluating current cybersecurity controls, identifying gaps, and preparing documentation to meet the required compliance benchmarks under the Cybersecurity Maturity Model Certification framework. The task is critical for maintaining eligibility to handle sensitive DoD information and aligning with evolving federal cybersecurity mandates. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance required at Tobyhanna, Pennsylvania, ZIP 18466-5050. The solicitation was posted on July 30, 2026, with responses due by August 7, 2026, and falls under NAICS code 541512 for computer systems design services. No set-aside designation is specified, indicating the opportunity is open to all qualified subcontractors. The effort is part of a broader initiative to strengthen cybersecurity posture across defense contractors and requires precise alignment with federal guidelines without external audit intervention at this stage.