Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance and adherence to NIST Special Publication 800-171 for systems processing controlled unclassified information under Defense Federal Acquisition Regulation Supplement (DFARS) requirements. This subcontract is focused on enabling the contractor to conduct a thorough self-assessment of their cybersecurity controls, implement necessary safeguards, and document compliance with federal standards for protecting sensitive government data. The work will involve evaluating existing security practices, identifying gaps, remediating deficiencies, and preparing for potential third-party assessment, ensuring all systems handling CUI meet the mandated thresholds for defense supply chain security. The opportunity is tied to the NAICS code 541512 for computer systems design services and is issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. Performance is required at a designated location in New Cumberland, Pennsylvania with a zip code of 17070-5002. Interested parties must submit responses by the deadline of July 23, 2026, with the solicitation posted on July 15, 2026. This subcontract does not include a specific set-aside designation and is accessible through the DIBBS platform under solicitation number SPE4A726T575E. Participation requires a strong understanding of CMMC frameworks, NIST controls, and DFARS compliance obligations within the defense industrial base context.