Cybersecurity Compliance (CMMC Level 2) Implementation Support

The contract supports the prime contractor in achieving CMMC Level 2 compliance by providing targeted assistance in self-assessment, development of required cybersecurity policies, and full implementation of the NIST SP 800-171 controls necessary for handling Controlled Unclassified Information. This engagement is focused on ensuring all technical, administrative, and procedural safeguards are properly established and documented to meet federal cybersecurity standards for CUI protection. The work will involve close collaboration with the prime contractor’s internal teams to identify gaps, remediate deficiencies, and maintain ongoing compliance readiness. Performance is expected to be conducted at the location in New Cumberland, Pennsylvania with a zip code of 17070-5002, under a subcontract arrangement linked to the Department of Defense through its ASC Commodities Division. The solicitation was posted on July 30, 2026, and responses are due by August 7, 2026, with the North American Industry Classification System code 541512 indicating the work falls under Custom Computer Programming Services. This effort is critical for enabling the prime contractor to operate within DOD supply chain requirements and maintain eligibility for future defense-related contracts involving sensitive unclassified information.