Cybersecurity Compliance and CMMC Self-Assessment Support

The contract requires comprehensive support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment readiness and ensuring full compliance with NIST Special Publication 800-171 for all systems handling covered defense information. This involves implementing, documenting, and validating security controls aligned with NIST 800-171 requirements, conducting internal assessments to identify gaps, and preparing evidence to demonstrate compliance in preparation for official CMMC auditors. The work must be completed within a strict timeline, with responses due by August 6, 2026, and performance centered at the specified location in New Cumberland, PA, with a NAICS code of 541512 indicating information technology consulting services. This is a subcontract under the Department of Defense, issued by the ASC SUPPLIER OPER OEM DIVISION, and is part of a broader effort to enforce cybersecurity standards across the defense industrial base. The contractor must have proven experience in CMMC and NIST compliance frameworks, including the ability to work within a defense supply chain environment, handle sensitive information securely, and deliver verifiable documentation to meet federal requirements. All security measures and compliance activities must be executed in alignment with federal guidelines, and the success of this subcontract is critical to maintaining eligibility for future defense contracts requiring CMMC certification.