Cybersecurity Compliance & CMMC Self-Assessment Support

The contract involves providing support to a prime contractor in executing a CMMC Level 2 self-assessment to ensure compliance with cybersecurity standards for protecting Covered Defense Information. The work focuses on aligning systems and procedures with the requirements outlined in NIST SP 800-171 and DFARS clauses, ensuring that appropriate safeguards are implemented and documented to meet federal defense cybersecurity mandates. The subcontractor will be responsible for assisting with gap analysis, policy development, control implementation, and preparation of assessment documentation necessary to achieve and validate CMMC Level 2 readiness. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services, with performance to be carried out at a location in Sandwich, Massachusetts, zip code 02563-1021. The opportunity was posted on August 4, 2026, with responses due by August 12, 2026, and is procured by the ASC Commodities Division under the Department of Defense. The effort is critical to enabling the prime contractor to meet mandatory DoD cybersecurity compliance thresholds and will require expertise in federal contract compliance, cybersecurity frameworks, and documentation rigor to pass the self-assessment without deficiencies.