Cybersecurity Compliance (CMMC Level 2) Assessment and Support

The contract seeks a third-party provider to deliver comprehensive cybersecurity compliance support aligned with the Cybersecurity Maturity Model Certification Level 2 requirements for defense contractors. Services include thorough documentation of security controls, system hardening to meet NIST SP 800-171 standards, and preparation for formal CMMC audits to ensure readiness and adherence to Department of Defense cybersecurity protocols. The scope is centered on enabling contractors to achieve and maintain compliance through structured assessments, gap analyses, and remediation guidance tailored to the unique operational environments of defense supply chain partners. Performance is required at Hill Air Force Base, Utah, with a response deadline of July 24, 2026, and the contract is structured as a subcontract under the NAICS code 541512 for Computer Systems Design Services. The procurement is managed by the ASC Commodities Division within the Department of Defense and is open to qualified vendors capable of delivering technical expertise in CMMC Level 2 implementation without a set-aside classification. The contracting office has not provided a point of contact, and all submissions must be made through the designated DIBBS platform.