CMMC Level 2 Self-Assessment and NIST SP 800-171 Compliance Support

The contract requires performance or support of a CMMC Level 2 self-assessment to ensure compliance with NIST SP 800-171 for the protection of covered defense information, with a focus on developing a System Security Plan and Plan of Action and Milestones. The effort is structured as a small business set-aside under SBA regulations, specifically designated as a Total Small Business Set-Aside, and is classified under NAICS code 541512 for computer systems design services. The work is tied to a subcontract opportunity issued by the ASC Commodities Division under the Department of Defense, with performance required at a location in New Cumberland, Pennsylvania, zip code 17070-5002. Interested parties must submit responses by the deadline of July 29, 2026, following the solicitation posted on July 21, 2026. Access to the full solicitation is available through the DIBBS platform, though no point of contact is listed in the provided data.