Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the performance and submission of a CMMC Level 2 self-assessment to demonstrate compliance with NIST SP 800-171 and CMMC 2.0 standards for handling controlled unclassified information. This engagement is structured as a subcontract under the Department of Defense’s ASC Commodities Division, targeting organizations capable of evaluating and documenting their cybersecurity posture against the required controls. The assessment must thoroughly validate adherence to the framework governing the protection of sensitive federal data, ensuring that all technical and procedural safeguards are properly implemented and documented. The solicitation was posted on July 16, 2026, with a response deadline of July 24, 2026, indicating a tight turnaround for submission. Performance is tied to the location of New Cumberland, Pennsylvania, with a ZIP code of 17070-5002, suggesting that while the assessment may be conducted remotely, the contractual obligations and potential follow-up activities are centered at this site. The NAICS code 541611 aligns this effort with management consulting services, emphasizing the advisory and evaluative nature of the work. Interested parties must ensure their self-assessment accurately reflects current cybersecurity practices and includes all necessary documentation to satisfy federal compliance requirements under the CMMC program.