Cybersecurity Compliance (CMMC Level 2 Assessment Support)

The contract seeks advisory and assessment services to support a prime contractor in achieving and maintaining CMMC Level 2 compliance for protecting covered defense information associated with manufacturing and quality data. The scope centers on ensuring the contractor meets the cybersecurity controls mandated by the Cybersecurity Maturity Model Certification framework at Level 2, which includes implementing safeguards for sensitive information within industrial control systems and production environments. Services may include gap analysis, policy development, employee training, documentation review, and readiness evaluations tailored to the unique operational context of defense manufacturing. The requirement is issued as a subcontract under the Department of Defense’s ASC Commodities Division, with performance designated to take place in Mechanicsburg, Pennsylvania, at the ZIP code 17050-2411. The solicitation falls under the NAICS code 541611 for management, scientific, and technical consulting services, indicating a focus on expert guidance rather than implementation hardware or software. Responses must be submitted by August 5, 2026, with the opportunity posted on DIBBS starting July 28, 2026. There is no set-aside designation, and no point of contact is provided, suggesting proposers should reference the DIBBS portal for further details or inquiries.