Cybersecurity Compliance (CMMC Level 2)

The contract requires the contractor to perform and submit a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment focused on the contractor’s information systems that handle covered defense information. This self-assessment is critical to ensure compliance with cybersecurity standards mandated by the Department of Defense, aiming to protect sensitive information within defense supply chains. The work is categorized under NAICS code 541611, indicating a focus on management consulting services related to cybersecurity compliance. The contract is a subcontract posted by the ASC Supplier OPER OEM Division within the Department of Defense, with the place of performance specified as Tinker Air Force Base, zip code 73145-8000. The contract posting date is May 19, 2026, with a response deadline of May 27, 2026, indicating a short turnaround time for submissions. The solicitation does not specify any set-aside type or organizational type requirements. The contractor is expected to meet the CMMC Level 2 requirements, which involve demonstrating a maturity level of cybersecurity controls to safeguard controlled unclassified information, ensuring continuity and security within the defense industrial base.