Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract requires support to the prime contractor in conducting a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment to ensure compliance with the protection of Controlled Unclassified Information (CUI) as mandated by DFARS 252.204-7012. The work focuses on enabling the prime contractor to meet the cybersecurity requirements necessary for handling CUI, with the goal of achieving full alignment with CMMC Level 2 controls. This includes assessing current cybersecurity practices, identifying gaps, documenting policies and procedures, and preparing the necessary Evidence of Compliance documentation to successfully complete the self-assessment process. The solicitation is classified as a subcontract under NAICS code 541512, which pertains to Computer Systems Design Services. The opportunity is issued by the Department of Defense through the ASC Commodities Division, with performance expected to occur in New Cumberland, Pennsylvania, at ZIP code 17070-5002. Responses must be submitted by August 5, 2026, and the posting date for this requirement is July 28, 2026. While no set-aside designation or point of contact is specified, interested parties are directed to the DIBBS portal for further details and submission requirements.