Cybersecurity Compliance & CMMC Self-Assessment Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by implementing the NIST Special Publication 800-171 security controls to fulfill the requirements of DFARS 252.204-7012 for protecting covered defense information. The work involves conducting a self-assessment of current cybersecurity posture, identifying gaps in control implementation, and executing remediation plans to align with federal standards for safeguarding sensitive data within defense contractor environments. The effort is focused on ensuring full compliance through documentation, policy updates, system hardening, and workforce training aligned with CMMC Level 2 objectives. This subcontract is issued under the NAICS code 541512 for computer systems design services and is positioned for performance in Texarkana, Texas, with a response deadline of May 20, 2026. The contracting entity is the ASC Supplier Oper OEM Division within the Department of Defense, indicating the work is part of a larger defense supply chain initiative. Participation requires the contractor to have the technical capability to interpret NIST 800-171 requirements, manage audit readiness processes, and deliver verifiable evidence of control implementation. There is no set-aside designation provided, meaning the opportunity is open to all qualified vendors without preference based on size or status.