Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

This contract requires the performance of a self-assessment of information systems to ensure compliance with the NIST SP 800-171 cybersecurity requirements, specifically related to protecting covered defense information. The assessment results must be submitted in accordance with DFARS clause 252.240-7997, which governs safeguarding sensitive defense-related data. The objective is to meet the cybersecurity standards associated with CMMC Level 2, reflecting moderate security controls. The contract is a subcontract opportunity issued by the Department of Defense, under the ASC SUPPLIER OPER OEM DIVISION, with work to be performed at Tinker Air Force Base, zip code 73145-8000. The solicitation was posted on May 31, 2026, and responses are due by June 8, 2026. The relevant NAICS code is 541512, indicating it pertains to computer systems design services. The contract is centered on helping the government verify suppliers’ cybersecurity posture and protection of sensitive defense information as part of broader supply chain risk management efforts.