Cybersecurity Compliance & CMMC Level 2 Assessment

The contract involves conducting a Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment along with the implementation of NIST SP 800-171 controls to safeguard covered defense information. The contractor is required to ensure compliance with the Department of Defense’s cybersecurity standards and report their findings through the Supplier Performance Risk System (SPRS). The scope emphasizes securing sensitive defense information and supporting the DoD's efforts to enhance cyber defense capabilities. Issued by the ASC Commodities Division of the Department of Defense, this subcontract requests services to be performed at Tinker Air Force Base, with the NAICS code designated as 541512, indicating information technology services. The posting date for the contract was May 13, 2026, and responses were due by May 21, 2026. This effort is critical in maintaining the security posture of defense contractors and aligns with the DoD's ongoing cybersecurity initiatives.