Cybersecurity Compliance (CMMC Level 2) Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, with a focus on conducting a self-assessment, performing a NIST SP 800-171 gap analysis, and developing the necessary documentation to meet DFARS 252.204-7012 requirements. This effort is critical for organizations handling controlled unclassified information and aims to ensure alignment with Department of Defense cybersecurity standards through systematic evaluation and remediation of security controls. The work is structured as a subcontract under the NAICS code 541512, with the performance location set in New Cumberland, Pennsylvania, and a bid submission deadline of August 13, 2026. The contracting entity is the ASC Commodities Division within the Department of Defense, indicating this solicitation is part of broader efforts to enforce cybersecurity readiness across the defense industrial base. Suppliers and service providers must demonstrate expertise in CMMC frameworks and federal compliance systems to successfully fulfill the requirements outlined in this opportunity.