Cybersecurity Compliance (CMMC Level 2)

The contract requires the successful bidder to perform and document a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment to verify readiness and compliance with Department of Defense standards for managing Controlled Unclassified Information. This engagement is critical for maintaining the security posture necessary to handle sensitive but unclassified data within the defense supply chain and must align fully with the CMMC 2.0 framework’s requirements for implementation and documentation of security controls. The assessment must be thorough, traceable, and capable of sustaining audit readiness, with all findings and corrective actions formally recorded. This is a subcontract under the Department of Defense’s ASC Commodities Division, with performance occurring at Mechanicsburg, Pennsylvania, 17050-2411. The solicitation was posted on July 30, 2026, and responses are due by August 7, 2026. It falls under NAICS code 541512 for Computer Systems Design Services, indicating the work involves technical expertise in cybersecurity architecture and compliance processes. The opportunity is open to eligible subcontractors, with no set-aside classification specified, and can be accessed via the DIBBS portal for further details and submission.