Cybersecurity Compliance and CMMC Assessment Support

The contract supports the prime contractor in attaining and sustaining CMMC Level 2 certification by providing comprehensive cybersecurity compliance services, including the development and implementation of required policies and procedures, hardening of information systems to meet established standards, and active coordination with a C3PAO to facilitate assessment readiness and successful certification. The work spans the full lifecycle of compliance, from initial gap analysis through documentation, technical configuration controls, and final validation, ensuring alignment with NIST SP 800-171 requirements and CMMC framework controls. The task is scoped as a subcontract under the Department of Defense’s ASC Commodities Division, with performance concentrated at a designated location in New Cumberland, Pennsylvania, 17070-5002. The solicitation, classified under NAICS code 541512 for computer systems design services, was posted on July 21, 2026, with responses due by July 29, 2026. The effort is critical to enabling the prime contractor’s eligibility to handle controlled unclassified information and maintain future DoD contract eligibility under the CMMC program.