Cybersecurity Compliance and CMMC Assessment Support

The contract supports the prime contractor in achieving full compliance with NIST SP 800-171 Rev 1 and successfully completing a CMMC Level 2 self-assessment, requiring hands-on implementation of cybersecurity controls across the organization’s systems and processes. This includes identifying gaps in current security posture, deploying required technical and administrative safeguards, documenting policies and procedures, and ensuring all controls are properly executed and maintained to meet federal standards. The effort also encompasses accurate and timely reporting through the Supplier Performance Risk System to reflect compliance status and readiness for assessment. The work is conducted under a subcontract for the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION, with a focus on enhancing the prime contractor’s cybersecurity maturity to align with CMMC Level 2 requirements. The solicitation was posted on May 11, 2026, with responses due by May 19, 2026, and falls under the NAICS code 541512 for computer systems design services. Performance is expected to be carried out in support of defense-related operations without a specified geographic location, and all activities must be completed in accordance with federal cybersecurity frameworks to ensure eligibility for future DoD contracts requiring CMMC certification.