Cybersecurity Compliance & CMMC Level 2 Assessment

The contract requires support to achieve and maintain CMMC Level 2 compliance for the handling of covered defense information, with a focus on aligning systems, policies, and procedures with NIST SP 800-171 requirements. This includes conducting a comprehensive system assessment to identify gaps in current cybersecurity practices, developing or revising security policies and procedures, and implementing controls to ensure full compliance with the CMMC framework. The work is scoped to address both technical and administrative safeguards necessary to protect sensitive defense data, with an emphasis on documentation, training, and continuous monitoring to sustain compliance. This is a subcontract under the Department of Defense, managed by the ASC Commodities Division, with performance required at New Cumberland, Pennsylvania, ZIP code 17070-5002. The solicitation falls under NAICS code 541512 for Computer Systems Design Services and was posted on July 20, 2026, with a response deadline of July 28, 2026. Interested parties must submit proposals through the DIBBS portal prior to the deadline to be considered for award. The contract seeks qualified organizations with demonstrated experience in CMMC implementation, NIST 800-171 alignment, and defense sector cybersecurity compliance.