Cybersecurity Compliance (CMMC Level 2)

This contract requires full support for achieving CMMC Level 2 compliance by implementing all necessary NIST SP 800-171 security controls to protect Covered Defense Information as mandated by DFARS regulations. The work involves assessing current cybersecurity practices, identifying gaps, and executing a comprehensive plan to meet the technical and procedural requirements of CMMC Level 2, ensuring that all systems handling CDI are properly secured and auditable. The contractor must demonstrate measurable progress toward certification through documentation, policy updates, workforce training, and technical configuration changes aligned with federal defense cybersecurity standards. The contract is issued as a subcontract under the Department of Defense’s ASC Commodities Division, with performance centered in Jacksonville, North Carolina, at the ZIP code 28545-6070. It falls under NAICS code 541512 for computer systems design services and is solicited with a response deadline of August 3, 2026. The project necessitates a clear understanding of defense contracting cybersecurity obligations and the ability to operate within a secure, compliant environment that supports DoD supply chain security objectives. All activities must be completed by the deadline to ensure timely submission of compliance evidence and potential certification readiness.