Cybersecurity Compliance and CMMC Assessment Support

The contract involves providing comprehensive support to achieve CMMC Level 2 compliance for systems and processes under the Department of Defense’s ASC Commo­dities Division. This includes conducting a thorough gap assessment to identify current cybersecurity deficiencies, developing and implementing required documentation to meet CMMC controls, hardening IT systems to align with NIST SP 800-171 standards, and coordinating directly with a certified third-party assessment organization to facilitate the official certification process. All activities are focused on ensuring the defense contractor meets the rigorous cybersecurity requirements mandated for handling controlled unclassified information. Work under this subcontract is to be performed at Mechanicsburg, Pennsylvania, with a strict submission deadline of July 20, 2026, following the posting date of July 12, 2026. The contract falls under NAICS code 541512, indicating it is for computer systems design services, and is structured as a subcontract within the broader Defense Logistics Agency procurement framework. The effort is critical for enabling the prime contractor to maintain eligibility for DoD contracts requiring CMMC Level 2 certification, and success hinges on precise execution of compliance activities, timely documentation, and seamless collaboration with external assessors to pass the formal audit.