Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for achieving CMMC Level 2 certification, implementing NIST SP 800-171 compliance measures, and fulfilling the DFARS cybersecurity clause requirements across covered defense information systems. This subcontract targets organizations capable of guiding contractors through the full spectrum of cybersecurity compliance activities, including policy development, control implementation, risk assessments, and documentation standardization aligned with federal defense standards. The scope requires deep familiarity with DoD cybersecurity frameworks and the ability to deliver actionable, audit-ready outcomes for systems handling controlled unclassified information. Performance is expected to be executed from New Cumberland, Pennsylvania, with a response deadline of August 5, 2026, and a posted date of July 28, 2026. The work falls under NAICS code 541512 for computer systems design services and is administered by the ASC Commodities Division under the Department of Defense. The subcontractor must demonstrate proven experience in CMMC readiness, NIST 800-171 implementation, and DFARS clause integration, with an emphasis on operational effectiveness, compliance documentation, and readiness for third-party assessment. No set-aside provisions are indicated, and the procurement is open to eligible contractors capable of meeting stringent defense cybersecurity obligations.