Cybersecurity Compliance (CMMC Level 2 Assessment Support)

The contract supports a prime contractor in achieving CMMC Level 2 certification by providing comprehensive cybersecurity compliance services, including conducting a detailed gap analysis to identify shortcomings against CMMC requirements, developing necessary documentation, and creating a System Security Plan tailored to the organization’s infrastructure and operations. The scope also involves active coordination with a Certified Third-Party Assessment Organization to facilitate the official assessment process, ensuring all criteria are met and evidence is properly prepared for review. This engagement is critical for the prime contractor to meet federal cybersecurity standards required for handling controlled unclassified information. The work will be performed at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, under a subcontract agreement classified under NAICS code 541512 for computer systems design services. The opportunity was posted on July 28, 2026, and responses are due by August 5, 2026, indicating a short turnaround timeline for qualified offerors to submit proposals. The contracting activity falls under the Department of Defense, specifically the ASC SUPPLIER OPER AE AND AF DIV, and is intended to enhance the cybersecurity posture of the defense supply chain in alignment with National Institute of Standards and Technology and Department of Defense mandates.