Cybersecurity Compliance and CMMC Level 2 Implementation

The contract requires comprehensive support to achieve and maintain CMMC Level 2 compliance for handling Covered Defense Information, with a focus on aligning all cybersecurity practices with NIST SP 800-171 requirements. This includes conducting a thorough self-assessment of current controls, developing and documenting necessary policies and procedures, implementing robust access control mechanisms, and ensuring all systems and processes meet the mandated security standards. The effort is geared toward full operational readiness for third-party assessment and ongoing compliance under the Cybersecurity Maturity Model Certification framework. The work is to be performed at the designated place of performance in New Cumberland, Pennsylvania, under a subcontract issued by the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION. The solicitation closes on August 7, 2026, and the NAICS code 541512 indicates the scope involves computer systems design and related services. All deliverables must demonstrate clear evidence of adherence to federal cybersecurity guidelines, with documentation and implementation strategies subject to verification during audits. The contractor is expected to provide end-to-end support from initial gap analysis through to continuous compliance monitoring.