Cybersecurity Compliance & CMMC Self-Assessment Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance and implementing the National Institute of Standards and Technology Special Publication 800-171 controls on systems that handle covered defense information under this agreement. The work involves guiding the contractor through the self-assessment process required for CMMC Level 2 certification, ensuring alignment with NIST SP 800-171 security requirements to protect sensitive data tied to defense contracts. This support includes evaluating current cybersecurity posture, identifying gaps, developing remediation plans, and assisting with documentation and procedural updates necessary to meet federal standards for information security. The subcontract is issued by the ASC Commodities Division of the Department of Defense and is targeted for performance at New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. It falls under NAICS code 541512, categorizing it as computer systems design and related services. The solicitation was posted on July 30, 2026, and responses are due by August 7, 2026. The contract does not specify a set-aside type or designated small business preferences, and all submissions must be made through the DIBBS platform at the provided URL. The effort is critical for maintaining compliance within the defense industrial base and ensuring secure handling of controlled unclassified information.