Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract seeks support for conducting a CMMC Level 2 self-assessment to verify compliance with cybersecurity standards required for handling controlled unclassified information. The work is intended for a subcontractor who will assist in evaluating the organization’s cybersecurity posture against the CMMC framework’s Level 2 requirements, ensuring alignment with practices necessary to protect CUI. This effort is critical for maintaining eligibility to perform on Department of Defense contracts that involve sensitive but unclassified data. The solicitation is tied to the NAICS code 541512 for computer systems design services and is managed by the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense. Performance of the work is designated to Tracy, California, with a zip code of 95304-5000. The opportunity was posted on July 30, 2026, and responses are due by August 7, 2026. The solicitation is structured as a subcontract and does not specify a set-aside type, indicating it is open to any qualified bidder meeting the technical and compliance criteria. Proposals must address the scope of self-assessment support with the goal of achieving and documenting CMMC Level 2 readiness.