Cybersecurity Compliance and CMMC Level 2 Self-Assessment Support

The contract seeks advisory services to support defense contractors in achieving NIST SP 800-171 compliance and preparing for a CMMC Level 2 self-assessment under RD004. The scope includes system hardening to meet required security controls, comprehensive documentation development, and ensuring full audit readiness. Services are focused on guiding contractors through the technical and procedural requirements necessary to meet federal cybersecurity standards for handling controlled unclassified information. The work is targeted at organizations operating within the defense industrial base and must be executed to ensure alignment with Department of Defense cybersecurity frameworks. This subcontract is issued by the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense, with performance expected to take place in San Diego, California, with a zip code of 92136-3581. The North American Industry Classification System code is 541512, indicating it falls under custom computer programming services. The solicitation was posted on August 5, 2026, and responses must be submitted by August 13, 2026. The contract is open for bidding through the DIBBS platform and is not subject to any specific small business set-aside designation. All work must be completed in accordance with federal cybersecurity mandates to ensure recipients are properly positioned to pass CMMC Level 2 assessments without third-party verification.