Supply Chain Compliance and Cybersecurity Reporting

The contract requires support for achieving CMMC Level 2 self-assessment, ensuring compliance with NIST SP 800-171 standards, and developing a comprehensive System Security Plan to properly handle Covered Defense Information. This effort is critical for maintaining the security posture of systems processing sensitive defense data and must align with Department of Defense cybersecurity requirements. The work involves evaluating current controls, identifying gaps, implementing necessary safeguards, and documenting policies and procedures in a formal SSP that meets CMMC and NIST benchmarks. This subcontract is issued under NAICS code 541512 and is performance-based, with the place of performance located in New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation was posted on July 28, 2026, and responses are due by July 31, 2026. The contracting entity is the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense, seeking qualified providers to ensure supply chain cybersecurity readiness. The goal is to establish a verifiable, auditable framework that enables the contractor to sustain compliance with federal defense cybersecurity mandates and facilitate ongoing readiness for future CMMC assessments.