Cybersecurity Compliance & CMMC Assessment Support

The contract supports the implementation of NIST SP 800-171 controls and facilitates a CMMC Level 2 self-assessment for managing controlled unclassified information in alignment with DFARS requirements. This effort is critical for ensuring that systems and processes handling CUI meet federal cybersecurity standards and are prepared for third-party verification under the Cybersecurity Maturity Model Certification framework. The work focuses on closing compliance gaps, documenting security controls, and preparing internal evidence to demonstrate adherence to the required practices and processes. The subcontract is issued by the ASC Commodities Division under the Department of Defense and requires performance at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 21, 2026, and responses must be submitted by July 29, 2026. The NAICS code 541512 identifies the work as computer systems design and related services, indicating the technical and consulting nature of the support required. All activities must be conducted to support the agency’s readiness for CMMC Level 2 certification, emphasizing operational security, documentation rigor, and continuous compliance enforcement.