Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract supports the prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment compliance by providing necessary guidance and resources to implement and document required security practices. The focus is on safeguarding covered defense information (CDI) through adherence to NIST SP 800-171 controls, ensuring that all technical, administrative, and physical safeguards are properly established and maintained. This includes assistance with policy development, employee training, access controls, incident response readiness, and comprehensive record-keeping to demonstrate compliance during a self-assessment evaluation. The work is performed under a subcontract arranged by the Department of Defense’s ASC SUPPLIER OPER AE AND AF DIV, with the primary place of performance located at Hill Air Force Base, Utah, zip code 84056-5734. The solicitation, identified by the number SPE4A726T577K, falls under NAICS code 541512 for computer systems design services and is open for responses until July 24, 2026. The effort requires a thorough understanding of DOD cybersecurity requirements and the ability to operate in a classified or controlled unclassified information (CUI) environment. The contractor must be prepared to work closely with the prime to meet strict compliance deadlines and ensure all documentation aligns with CMMC standards.