Cybersecurity Compliance (CMMC Level 2 Assessment Support)

The contract seeks a third-party provider to deliver CMMC Level 2 assessment and documentation support to ensure compliance with DFARS 252.204-7012 cybersecurity requirements. This effort is critical for safeguarding controlled unclassified information within the defense supply chain and requires the contractor to conduct a thorough evaluation of the organization’s cybersecurity posture, identify gaps, and produce accurate documentation aligned with NIST SP 800-171 controls. The work must be performed at Tinker Air Force Base, Oklahoma, with all deliverables meeting the Department of Defense’s strict standards for certification readiness. This is a subcontract opportunity under NAICS code 541512, posted by the ASC Commodities Division of the Department of Defense, with a response deadline of August 17, 2026. There is no specified set-aside status, and the contract is open to qualified vendors capable of delivering expert cybersecurity compliance services. While no point of contact is listed, interested parties must submit their proposals through the DIBBS portal before the deadline to be considered for award. Success will depend on demonstrated experience in CMMC Level 2 assessments, a clear methodology for gap remediation, and proven ability to produce auditable documentation that satisfies DoD requirements.