Cybersecurity Compliance and CMMC Assessment Support

The contract seeks third-party support for a Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment and ongoing compliance efforts to meet the requirements of DFARS 252.204-7012 and NIST SP 800-171 for the protection of covered defense information. The scope includes evaluating the contractor’s cybersecurity posture, implementing necessary controls, documenting compliance measures, and preparing for official CMMC certification, ensuring alignment with Department of Defense standards for handling sensitive government data. The work is to be performed at the place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. This is a subcontract under the NAICS code 541512, which classifies it as Computer Systems Design Services, and is being issued by the ASC Commodities Division of the Department of Defense. The solicitation was posted on July 21, 2026, with responses due by July 29, 2026. While no set-aside classification is specified, the procurement is open to qualified subcontractors capable of delivering CMMC Level 2 assessment services with proven experience in defense cybersecurity frameworks. All activities must be completed in accordance with federal acquisition guidelines and the specific security requirements tied to the handling of controlled unclassified information.