Buyer profile / DLA Mechanicsburg, 2026
This DLA office tells you the level. That's the part to read twice.
Level 1 sounds like the easy one.
In the SAM.gov snapshot we captured on August 30, 2026, this office had 240 open solicitations and 98 carried CMMC or DFARS cybersecurity text, 40.8 percent against 5.3 across all DoD. Unlike its neighbor down the road, it fills in the blank: 46 of the 98 name “CMMC Level 1 (Self)” in the notice itself.
Level 1 is also the level where nothing can sit on a plan of action. Deep Fathom checks that before you submit.
01 / What this means for your bids
A stated level tells you what to prepare. Prepare all of it.
01.1
What Level 1 (Self) means
The 15 basic safeguarding requirements of FAR 52.204-21, self-assessed annually, entered in SPRS with an affirmation. Under the CMMC rule there's no conditional status at Level 1: every requirement met, nothing left on a plan of action.
If your posture today is “mostly there”, Level 1 is the level where mostly doesn't count. That's the regulation, stated separately from any notice.
01.2
Half the notices state no level
The other 52 flagged notices leave the field empty, and on those we make no inference. A blank field states no level. Ask the contracting officer.
01.3
The rule behind the pattern isn't visible
The flagged share holds at 42 percent in July and August and runs 20 to 62 percent within each top commodity. Same office, same months, some RFQs carry it and some don't.
The notice text doesn't show the rule, so we don't name one. Plan for the median 31.5-day window and note the middle half stretches to 47.
Counts from the retained census, adoption, and award receipts over the hash-pinned snapshot. Level 1 mechanics per 32 CFR 170.15. Plain-language terms per the DoD CMMC overview .
02 / How Deep Fathom helps
Prepare the fifteen, once, for every RFQ that names them.
One record of the requirement, the affected systems, the open work and the evidence, reviewed before this office's next window closes.
- 01
Confirm the requirement and scope
Read the provision and the package with us, and establish what the stated level obligates for your systems.
- 02
See the readiness work
Turn open FAR 52.204-21 gaps into specific actions with accountable owners and due dates.
- 03
Collect evidence in context
Keep each artifact connected to its requirement, source, owner, and review history.
- 04
Review before each submission
Check the SPRS entry, the affirmation date, open work, and changed conditions in time to act.
03 / What the office's notices say
The provision, with the field filled in.
NOTICE OF CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL REQUIREMENTS (NOV 2025) ... CMMC Level 1 (Self)
97 of the 98 flagged notices carry the provision title, and 46 state “CMMC Level 1 (Self)” in the notice text itself.
04 / The office record
What it buys, and who it buys from.
From the 98 flagged live notices, the top categories:
- By product code
- Electrical assemblies (5998) 15, then nonpowered valves (4820), pressure and temperature instruments (6685), and electrical converters (6130) at 6 each
- In practice
- An electronics buyer. Circuit boards and electronic components account for 702 of the 1,760 award actions since FY2024
- Award volume
- FY2024 through May 2026: 1,760 actions to 340 suppliers, $1.14 billion obligated, top ten at 39.4 percent, 73 suppliers with five or more actions. A much tighter base than NAVSUP next door, where the top ten hold a fifth
- Observed history
- The office's action count fell from 6,064 in FY2018 to 405 in FY2024, then rose to 932 in FY2025 and 423 in the first eight months of FY2026. Observed history, not a forecast
- Set-asides
- None of the 98 flagged notices carries one, and 8.5 percent of award actions in the period were SBA set-asides
- What the award record means
- A supplier name in the award record means the office issued award actions to that company through May 2026. Nothing about compliance status, nothing about who wins next, and subcontract work doesn't appear
| NAICS | What it is | Notices |
|---|---|---|
| 334412 | Bare printed circuit boards | 19 |
| 333998 | General purpose machinery | 10 |
| 332919 | Valves and fittings | 9 |
| 335931 | Current-carrying wiring devices | 7 |
| 334513 | Process instruments | 6 |
05 / Read this before acting on a profile
A profile describes the office, never a supplier, and never a requirement in force.
Every count is from the snapshot dated above and award figures run through May 2026. No clause displayed is claimed operative, no reader is claimed to fit any solicitation, and a blank field is never resolved.
Sell valves and gaskets to the Navy instead? NAVSUP next door is the bigger office and the page for you.
Platform evaluation / This office's next RFQ
When the buyer names the level, the clock is already running.
Tell us what you sell to this office, your CMMC status, and your open work. A Deep Fathom person reads it and names the first workflow to try.
Do not include CUI, credentials, export-controlled data, or any solicitation itself in this form.
Limitations
- The 20-to-62-percent commodity spread is stated without naming a selection rule, because the notice text doesn't show one.
- No clause displayed is claimed operative. No supplier compliance claims. Award names are observed history only.
- Level 1 mechanics are regulation, stated separately from any notice. Every number carries its snapshot date.