Cybersecurity Compliance (CMMC Level 2 Assessment Support)

The contract seeks third-party assessment and support services to achieve CMMC Level 2 certification, specifically to ensure compliance with DFARS requirements for handling Controlled Unclassified Information. The objective is to assist the contractor in meeting the cybersecurity standards mandated for safeguarding CUI, including implementing appropriate access controls, audit capabilities, incident response protocols, and system hardening measures as outlined in the CMMC framework. The support services may include gap analysis, documentation preparation, employee training, policy development, and formal readiness assessments leading to an official CMMC Level 2 evaluation. The work is classified as a subcontract under NAICS code 541330, with performance required at New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 16, 2026, and responses must be submitted by July 24, 2026. The contracting activity is under the Department of Defense, specifically the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is in support of defense supply chain cybersecurity readiness. Although no set-aside designation is specified, participation is open to qualified vendors capable of delivering CMMC certification readiness support in alignment with federal cybersecurity mandates.