Cybersecurity Compliance (CMMC Level 2) Support

The contract seeks support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance for systems that handle Controlled Unclassified Information (CUI), encompassing self-assessment activities, development of required security policies and procedures, and implementation of system hardening measures to meet federal standards. The work is critical to ensuring the contractor’s information systems align with CMMC requirements, particularly around access control, incident response, audit and accountability, and asset management, all of which are mandatory for safeguarding CUI under Department of Defense guidelines. This subcontract is issued under NAICS code 541512 for Computer Systems Design Services and is associated with the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION, with performance required at Jacksonville, Florida, zip code 32212-0103. The solicitation was posted on July 15, 2026, and responses are due by July 20, 2026, indicating a limited window for submission. The effort must be scoped to deliver actionable compliance outcomes, including documentation, evidence of implementation, and readiness for third-party assessment, without reliance on external certification at this stage though the goal is full CMMC Level 2 readiness. Technical expertise in DoD cyber frameworks and experience with CUI environments is essential for successful performance.