Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract supports a prime contractor in completing and submitting a Cybersecurity Maturity Model Certification Level 2 self-assessment through the Supplier Performance Risk System, ensuring full alignment with the requirements of NIST Special Publication 800-171 and CMMC 2.0 for the handling of Covered Defense Information. The effort involves guiding the prime contractor through each step of the self-assessment process, documenting compliance controls, and preparing all necessary evidence to demonstrate adherence to the established cybersecurity standards. The contractor must possess a thorough understanding of CMMC 2.0 frameworks and be capable of interpreting and applying NIST SP 800-171 requirements accurately to real-world organizational practices. This is a subcontract under the Department of Defense’s ASC Commodities Division, classified under NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 30, 2026, with a response deadline of August 7, 2026, indicating a tight turnaround for qualified responders to submit proposals. While no set-aside status or point of contact is specified, the place of performance and organizational details are left undefined, suggesting work may be performed remotely or at the prime contractor’s location. The focus remains strictly on achieving and validating CMMC Level 2 compliance to meet Defense Department contractual obligations for safeguarding sensitive information.