Cybersecurity and CMMC Assessment Support

This contract seeks support for completing a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment and coordinating with a Certified Third-Party Assessment Organization (C3PAO) to ensure full compliance with cybersecurity standards for handling Controlled Unclassified Information. The work involves assisting the prime contractor in preparing documentation, implementing required security controls, and facilitating communication with the C3PAO to successfully navigate the assessment process and achieve certification. The scope is focused on meeting federal cybersecurity requirements under the Department of Defense’s CMMC framework, specifically for environments handling sensitive but unclassified data. The solicitation is issued as a subcontract under NAICS code 541512, indicating it is for computer systems design services, and is managed by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. Performance is required to be conducted in Mechanicsburg, Pennsylvania, with a response deadline of July 17, 2026. The contract emphasizes timely and accurate alignment with CMMC Level 2 controls, including access control, audit and accountability, system and communications protection, and incident response, ensuring the subcontractor can effectively support the prime’s certification goals within the established timeframe.