Cybersecurity Compliance & CMMC Self-Assessment Support

This contract seeks consulting and documentation support to assist with achieving CMMC Level 2 self-assessment and compliance with NIST SP 800-171 standards for protecting covered defense information. The work will involve guiding the contractor through the necessary cybersecurity frameworks, preparing required documentation, and ensuring alignment with federal requirements for handling sensitive defense data. The services are critical for meeting the Department of Defense’s cybersecurity mandates and enabling eligibility for defense contracts requiring CMMC Level 2 certification. The contract is a subcontract under a Total Small Business Set-Aside, designated under NAICS code 541512, and is issued by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense. Performance is required at or near New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 21, 2026, and responses are due by July 29, 2026, indicating a tight turnaround for qualified small businesses to submit proposals. The effort is focused on delivering actionable, compliant outcomes that align with DOD cybersecurity expectations without requiring external certification at this stage, merely preparation for self-assessment.