Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

This contract seeks support for achieving CMMC Level 2 Self-Assessment and NIST SP 800-171 compliance to protect controlled unclassified information in alignment with DFARS requirements. The work involves assisting contractors in evaluating and implementing cybersecurity controls necessary to meet the mandated standards for safeguarding CUI, ensuring readiness for third-party assessment and ongoing regulatory adherence. The effort is critical for organizations handling sensitive defense-related data and will require a thorough understanding of NIST frameworks and CMMC methodologies to document posture, remediate gaps, and prepare for verification. The subcontract is posted under NAICS code 541512 for Computer Systems Design Services and is associated with the Department of Defense's Aviation Supply Chain initiative. The place of performance is designated as New Cumberland, PA with a ZIP code of 17070-5002, though the physical location may be flexible depending on the contractor’s operational structure. Responses are due by July 24, 2026, and the solicitation was posted on July 16, 2026, indicating a tight eight-day window for submission. The contract does not specify a set-aside type or point of contact, so interested parties must reference the provided DIBBS link for full details and submission instructions.