Cybersecurity Compliance and CMMC Level 2 Assessment

The contract requires the implementation and self-assessment for CMMC Level 2 compliance, with a focus on aligning cybersecurity practices with NIST SP 800-171 standards to safeguard Controlled Unclassified Information. This includes developing a System Security Plan and a Plan of Action and Milestones to document current security postures, identify gaps, and outline remediation steps. The work is geared toward ensuring the organization meets federal cybersecurity requirements for handling sensitive government data, with all activities centered on achieving full compliance through structured documentation and internal evaluation. The task is structured as a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, with performance required at a location in New Cumberland, Pennsylvania, ZIP 17070-5002. It falls under NAICS code 541512, indicating it relates to computer systems design services. The solicitation was posted on July 14, 2026, and responses are due by July 22, 2026. While no set-aside designation is specified, the nature of the work and the agency involved suggest it is intended for contractors with established cybersecurity capabilities and experience in CMMC and NIST frameworks.