CMMC Level 2 Self-Assessment Implementation Support

The contract seeks support to achieve CMMC Level 2 compliance through a structured approach that includes conducting a comprehensive gap analysis, developing and documenting required security policies, implementing NIST SP 800-171 controls, and preparing for a third-party assessment. The work focuses on ensuring the contractor meets the full scope of CMMC Level 2 requirements, covering administrative, technical, and operational safeguards necessary to protect controlled unclassified information. The deliverables will center on creating auditable evidence, aligning internal processes with federal cybersecurity standards, and positioning the organization to successfully pass an independent evaluation. The subcontract is issued under the Department of Defense, specifically by the ASC SUPPLIER OPER AE AND AF DIV, with performance required at Tobyhanna, Pennsylvania, zip code 18466-5050. The solicitation was posted on July 16, 2026, and responses must be submitted no later than July 21, 2026. This effort falls under NAICS code 541618, which pertains to other scientific and technical consulting services, emphasizing the advisory and implementation nature of the work. Although no set-aside designation is specified, the nature of the work indicates it is targeted at defense contractors seeking to meet mandatory cybersecurity compliance thresholds for DoD supply chain access.