Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract seeks support for achieving CMMC Level 2 self-assessment compliance, focusing on the documentation, system hardening, and full adherence to NIST SP 800-171 requirements for the handling of controlled unclassified information. This effort is essential for organizations handling CUI within the aviation supply chain and requires a thorough implementation of security controls aligned with federal cybersecurity standards. The work involves preparing comprehensive evidence of compliance, remediating gaps in current security practices, and ensuring systems are hardened against known threats to meet the rigorous benchmarks of CMMC Level 2. The subcontract is issued under the NAICS code 541512 and is tied to the Department of Defense’s Aviation Supply Chain initiative, with performance required at a designated location in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 19, 2026, with a firm response deadline of July 27, 2026, indicating a tightly timed procurement process. The nature of this contract requires qualified vendors to demonstrate experience in cybersecurity compliance frameworks, particularly around CUI management, and to deliver actionable documentation and technical adjustments that satisfy DOD auditing and assessment criteria without external validation beyond the self-assessment phase.