Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the performance and documentation of a CMMC Level 2 self-assessment to ensure compliance with DFARS 252.204-7012 standards for the safeguarding of controlled unclassified information. This effort is essential for meeting Department of Defense cybersecurity requirements and must be completed in accordance with the CMMC framework’s Level 2 practices, which include implementing a comprehensive set of security controls related to access, asset management, configuration, identification, incident response, and more. The deliverable must be formally documented to demonstrate alignment with NIST SP 800-171 and to provide verifiable evidence of safeguarding measures in place for CUI. The subcontract is issued by the ASC COMMODITIES DIVISION under the Department of Defense, with performance required at the location in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation falls under NAICS code 541512 for Computer Systems Design Services and is open for response until August 5, 2026, with the posting date on July 28, 2026. Interested parties must submit their proposals through the DIBBS portal before the deadline to be considered for award, and successful contractors will be expected to provide full documentation of their self-assessment findings and remediation actions as needed to satisfy federal compliance obligations.