Cybersecurity Compliance (CMMC Level 2) Support

The contract supports a prime contractor in achieving CMMC Level 2 compliance by performing a comprehensive gap analysis, developing necessary cybersecurity policies, and implementing system hardening measures to safeguard Controlled Unclassified Information. The scope of work focuses on bridging existing cybersecurity deficiencies to meet the requirements of the Cybersecurity Maturity Model Certification, ensuring the organization can successfully complete a self-assessment without external validation. Key activities include evaluating current security controls, documenting procedures aligned with NIST SP 800-171, and configuring systems to reduce vulnerabilities and enforce proper access controls for CUI. This subcontract is issued under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s ASC Commodities Division. Performance is required at New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The opportunity was posted on August 3, 2026, and responses must be submitted by August 11, 2026. The contract is structured as a subcontract, indicating it supports a larger prime contract effort within the defense industrial base, and it does not specify any set-aside status or small business preferences. All deliverables must align with federal cybersecurity standards aimed at protecting sensitive unclassified information in non-federal systems.