Cybersecurity and CMMC Compliance Support

The contract requires support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment, ensuring full compliance with DFARS 252.204-7008, and implementing robust safeguards for covered defense information, including controlled unclassified information. The subcontractor must provide expertise in aligning the prime contractor’s cybersecurity practices with federal standards to protect sensitive data throughout its lifecycle, focusing on technical, procedural, and organizational controls necessary for CMMC Level 2 readiness. This includes conducting assessments, documenting policies, remediating gaps, and preparing evidence for certification. This is a Women-Owned Small Business Set-Aside subcontract under NAICS code 541611, issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV, with performance required in New Cumberland, Pennsylvania, and a response deadline of July 31, 2026. The work is critical for maintaining the prime contractor’s eligibility to handle government-controlled data, and the subcontractor must demonstrate proven experience in DOD cybersecurity frameworks, CMMC implementation, and DFARS compliance. All activities must be executed in alignment with federal requirements and documented to meet audit readiness standards.