Cybersecurity Compliance Support (CMMC Level 2)

This contract supports the implementation and third-party assessment required to achieve CMMC Level 2 compliance for safeguarding covered defense information. The work involves delivering cybersecurity measures aligned with the Cybersecurity Maturity Model Certification framework to ensure proper protection of sensitive data in accordance with Department of Defense standards. The subcontract will focus on operational readiness, documentation, policy development, and technical controls necessary to pass an independent CMMC assessment, with all activities centered on meeting the defined security requirements for Level 2. The contract is issued by the ASC Commodities Division under the Department of Defense, with performance required at a location in New Cumberland, Pennsylvania, ZIP 17070-5002. It falls under NAICS code 541512 for computer systems design services and is classified as a subcontract. The solicitation was posted on July 16, 2026, with responses due by July 24, 2026. Interested parties must submit proposals through the DIBBS portal prior to the deadline to be considered for award, and the effort is critical to ensuring compliance for any entity handling controlled unclassified information in defense-related contexts.