Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract supports a prime contractor in preparing and submitting a CMMC Level 2 self-assessment to verify compliance with NIST SP 800-171 requirements for systems that handle Controlled Unclassified Information. The scope involves guiding the prime contractor through the necessary documentation, policy reviews, and control implementations required to meet CMMC Level 2 standards, ensuring all technical and administrative safeguards are properly documented and aligned with federal cybersecurity guidelines. The work is critical for maintaining eligibility to perform Defense Contracting activities involving sensitive but unclassified data. This subcontract is associated with the Department of Defense’s ASC Commodities Division and is performance-based at New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 21, 2026, and responses are due by July 29, 2026. The North American Industry Classification System code is 541512, indicating it falls under Computer Systems Design Services. The engagement is structured as a subcontract and does not specify any set-aside status, meaning it is open to all qualifying vendors regardless of business size or ownership characteristics.