Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the performance and ongoing maintenance of a CMMC Level 2 self-assessment for systems that handle Covered Defense Information, ensuring full alignment with the security controls outlined in NIST SP 800-171 and the contractual requirements of DFARS 252.204-7012. This includes identifying, implementing, and documenting the necessary cybersecurity practices to meet the assessed maturity level, with the goal of demonstrating compliance across all relevant systems and processes. The work must be completed and sustained in a manner that supports continuous monitoring and readiness for potential third-party assessments or audits. The task is structured as a subcontract under the Department of Defense’s Land Supply Chain, with the place of performance located in New Cumberland, Pennsylvania, at zip code 17070-5002. The solicitation was posted on July 5, 2026, and responses are due by July 16, 2026. It is classified under NAICS code 541512, which pertains to computer systems design and related services. No specific set-aside provisions are indicated, and while the point of contact details are not provided, the contract is accessible via the DIBBS portal for further submission requirements and procedural guidance.