Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the performance and documentation of a CMMC Level 2 self-assessment to verify compliance with NIST SP 800-171 standards for protecting Controlled Unclassified Information. This effort is critical to ensuring that cybersecurity controls are properly implemented and maintained to safeguard sensitive government data. The work must be completed and submitted by the response deadline of July 29, 2026, under a subcontract arrangement designated as a Total Small Business Set-Aside, meaning only small businesses qualify to bid. The North American Industry Classification System code is 541512, indicating the work falls under computer systems design and related services. The performance location is specified as New Cumberland, Pennsylvania, with a ZIP code of 17070-5002, and the contracting agency is the Department of Defense through its ASC SUPPLIER OPER OEM DIVISION. The solicitation is posted on the DIBBS platform and was made available on July 21, 2026. While no point of contact details are provided, the successful bidder must be fully prepared to document all assessment findings and evidentiary controls required for CMMC Level 2 certification, demonstrating adherence to the full scope of NIST SP 800-171 requirements without external validation beyond the self-assessment process.