Cybersecurity Compliance & CMMC Assessment Support

The contract entails comprehensive support for achieving CMMC Level 2 compliance, focusing on three core activities: conducting a self-assessment under RD004, preparing for a third-party assessment under RD005, and fully implementing the security controls outlined in NIST SP 800-171. This effort is critical for organizations handling controlled unclassified information and requires a structured approach to align with federal cybersecurity standards. The work demands expertise in evaluating current security postures, identifying gaps, developing remediation plans, and documenting evidence to satisfy CMMC requirements. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance centered in New Cumberland, Pennsylvania, at ZIP code 17070-5002. The solicitation, classified under NAICS code 541512 for Computer Systems Design Services, was posted on May 11, 2026, with Responses due by May 19, 2026. All work must be delivered within this timeframe to ensure timely compliance readiness, and the contractor is expected to provide actionable, audit-ready documentation and guidance to enable successful third-party evaluation. The absence of a set-aside designation indicates this opportunity is open to all qualified entities without restriction based on business size or type.