CMMC Level 2 Self-Assessment and Cybersecurity Compliance

The contract requires the execution and documentation of a CMMC Level 2 self-assessment to ensure compliance with NIST SP 800-171 standards for systems that handle controlled unclassified information. This effort is essential for verifying that cybersecurity protections are in place to safeguard sensitive government data from unauthorized access, disclosure, or compromise. The assessment must comprehensively evaluate all applicable security controls outlined in NIST SP 800-171, with thorough documentation to demonstrate adherence and readiness for third-party verification. The work is classified as a subcontract under the NAICS code 541612 and is being procured by the ASC SUPPLIER OPER OEM DIVISION, an entity under the Department of Defense. Performance is required at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. Interested parties must submit their proposals by the deadline of July 29, 2026, with the solicitation posted on July 21, 2026. The contract is not subject to a specific small business set-aside, and all responses must align with the technical and compliance requirements outlined in the CMMC framework to meet DoD contractual obligations.