Cybersecurity Compliance and CMMC Level 2 Self-Assessment

The contract requires the performance and documentation of a CMMC Level 2 self-assessment for systems that handle covered defense information, ensuring compliance with the Cybersecurity Maturity Model Certification requirements at Level 2. This subcontract is issued by the Department of Defense through its Active Devices Division, with performance expected to occur at New Cumberland, Pennsylvania, 17070-5002. The solicitation, identified under NAICS code 541611, is focused on cybersecurity consulting and assessment services and is open for responses until August 10, 2026. The work involves evaluating existing security controls, identifying gaps against CMMC Level 2 criteria, and producing a formal assessment report that demonstrates adherence to federal cybersecurity standards for defense contractors handling sensitive information. The contractor must document all processes, policies, and technical safeguards related to information systems storing or processing covered defense information, ensuring full alignment with the CMMC framework.