Cybersecurity Compliance (CMMC Level 2)

The contract requires performance of a CMMC Level 2 self-assessment and full implementation of NIST SP 800-171 security controls to protect covered defense information in accordance with DFARS 252.204-7012. This effort is critical to achieving and maintaining compliance with federal cybersecurity standards for handling sensitive defense data, and it must be completed in alignment with the Cybersecurity Maturity Model Certification framework at Level 2. The work is scoped as a subcontract under the Department of Defense, specifically for the ASC SUPPLIER OPER OEM DIVISION, with performance taking place at Tinker Air Force Base, Oklahoma, with a zip code of 73145-8000. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026, with the North American Industry Classification System code 541611 indicating it falls under Administrative Management and General Management Services.