Cybersecurity Compliance Support (CMMC Level 2)

The contract seeks a subcontractor to deliver comprehensive Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment and compliance support services, focusing on enabling organizations to meet Department of Defense cybersecurity requirements. Key deliverables include developing a System Security Plan (SSP), conducting a detailed NIST SP 800-171 gap analysis to identify deficiencies, and facilitating third-party certification to achieve CMMC Level 2 validation. These activities are critical for ensuring the protection of controlled unclassified information within defense supply chain environments. The work is structured to support a defense contractor’s transition to full compliance, with all tasks performed in alignment with federal cybersecurity standards and CMMC framework guidelines. The opportunity is issued under NAICS code 541620, classified as a subcontract, and is managed by the ASC Commodities Division of the Department of Defense. Performance must be conducted at the specified site in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on May 13, 2026, and responses are due by May 21, 2026. While no set-aside designation or point of contact is provided, the contract requires proven experience in CMMC compliance processes, technical mastery of NIST SP 800-171 controls, and the ability to coordinate effectively with third-party assessors to secure certification. All proposals must demonstrate a clear methodology for delivering accurate gap analyses, actionable SSP documentation, and a streamlined path to certification.