Cybersecurity Compliance (CMMC Level 2)

The contract requires the provision of a CMMC Level 2 self-assessment to ensure full compliance with NIST SP 800-171 and DFARS 252.204-7012 for the protection of controlled unclassified information on contractor information systems. The work involves validating that all required security controls are implemented and documented, with the goal of achieving and maintaining CMMC Level 2 certification as a prerequisite for handling sensitive Department of Defense information. The scope includes conducting a thorough review of policies, procedures, and technical safeguards, followed by a formal self-assessment report that demonstrates adherence to the defined cybersecurity framework. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is managed by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. Performance is required to occur in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on August 3, 2026, and responses must be submitted by August 11, 2026, with no set-aside provisions applied. The contract is accessible through the DIBBS portal, and successful offerors must be prepared to demonstrate full alignment with federal cybersecurity standards to maintain eligibility for DoD work.