Cybersecurity Compliance and CMMC Self-Assessment Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance by conducting a self-assessment, implementing all required security controls outlined in NIST Special Publication 800-171, and developing a comprehensive System Security Plan and Plan of Action & Milestones. These deliverables are essential for meeting Department of Defense cybersecurity standards and ensuring the contractor’s information systems are adequately protected against threats. The work will focus on aligning internal processes and technical safeguards with federal requirements to achieve and maintain compliance. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance expected to occur in Jacksonville, Florida, ZIP 32212-0103. The opportunity was posted on July 21, 2026, and responses are due by July 29, 2026. It falls under NAICS code 541512, which categorizes it as Computer Systems Design Services, indicating the need for specialized technical expertise in cybersecurity architecture and documentation. The effort is critical for enabling defense-related entities to meet mandated cyber hygiene standards and supports the broader DoD initiative to strengthen the security of the defense industrial base.