Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract focuses on providing support for completing the Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment, ensuring compliance with the NIST SP 800-171 controls for systems that handle Controlled Unclassified Information (CUI). This assistance is crucial for organizations interfacing with Department of Defense (DoD) systems to meet stringent cybersecurity requirements that protect sensitive information. The scope involves guiding organizations through the self-assessment process to verify they meet necessary cybersecurity standards as outlined by CMMC Level 2. Issued by the ASC Supplier Operations OEM Division under the Department of Defense, the opportunity is a subcontract classified under NAICS code 541512, which relates to computer systems design services. The contract will be performed at Hill Air Force Base, with responses due by May 27, 2026. This subcontract provides an essential role in helping defense contractors achieve and maintain compliance with federal cybersecurity mandates, enabling secure operations within DoD workflows and protecting controlled unclassified information.