CMMC Level 2 Self-Assessment and Gap Analysis Support

The contract focuses on providing readiness assessments to achieve CMMC Level 2 compliance by evaluating an organization’s current cybersecurity posture, identifying gaps in controls, and delivering actionable recommendations to align with the Cybersecurity Maturity Model Certification requirements. This support is critical for enabling self-attestation or preparing for an official audit, ensuring that the contractor meets the Department of Defense's standards for safeguarding controlled unclassified information. The work involves a thorough analysis of policies, procedures, technical controls, and operational practices against the CMMC Level 2 framework. The task is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with performance required at the location in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation was posted on May 12, 2026, and responses must be submitted by May 20, 2026, indicating a tight turnaround for qualified vendors to respond. The work is classified under NAICS code 541611, which corresponds to Management Consulting Services, signaling that the effort is advisory and analytical rather than technical implementation. The contract does not specify a set-aside status or point of contact, and all details are accessible via the provided DIBBS link.