Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

CMMC Level 2 Compliance and Cybersecurity Support

Active

Federal

Response Deadline08/10/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract seeks third-party support for achieving and maintaining CMMC Level 2 compliance to safeguard controlled unclassified information within the maritime supply chain. The effort focuses on assessing cybersecurity posture and providing implementation guidance to meet the required safeguards outlined in the CMMC framework, specifically tailored for handling CUI across subcontracted operations. This is a small business set-aside under the SBA program, exclusively available to total small businesses, with the North American Industry Classification System code 541512 designating it as computer systems design and related services. Performance is centered in New Cumberland, Pennsylvania, with the Department of Defense, under the Maritime Supply Chain office, serving as the contracting authority. The solicitation was posted on July 29, 2026, and responses are due by August 10, 2026. The subcontract will engage qualified providers to conduct comprehensive assessments, remediate gaps, and ensure ongoing compliance with CMMC Level 2 requirements throughout the supply chain, reinforcing the defense industrial base’s cyber resiliency. All work must align with federal standards for protecting sensitive information and supporting the broader objectives of the DoD’s cybersecurity maturity initiatives.

General Info

Small business contract for CMMC Level 2 compliance support in maritime supply chain, New Cumberland PA.

Agency

Department Of Defense → MARITIME SUPPLY CHAINView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

NEW CUMBERLAND, PA, 17070-5002, US

Set-Aside

SBA

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 29

subcontract

Response DeadlineAug 10

Submission deadline

Response Deadline

08/10/2026, 05:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → MARITIME SUPPLY CHAIN

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → MARITIME SUPPLY CHAIN

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Third-party CMMC Level 2 assessment and compliance support for handling controlled unclassified information (CUI) across the supply chain.

Similar Contracts

Same NAICS industry code

Virtualization Consulting IDIQThe Port of Seattle is seeking a technical services partner to conduct a thorough evaluation of its existing virtualization platform, focusing on performance, security, and architectural integrity. The engagement aims to validate the platform’s operational reliability, uncover potential risks, and recommend optimization strategies that align with the organization’s business goals, compliance requirements, security standards, and resiliency needs. The deliverable will include a prioritized roadmap outlining actionable steps to enhance the platform’s effectiveness and long-term sustainability. This opportunity is structured under the Virtualization Consulting IDIQ, with the North American Industry Classification System code 541512, indicating it is scoped for computer systems design and related services. The contracting office is the Port of Seattle’s ICT Enterprise Infrastructure Services division, and inquiries should be directed to Carol Hassard as the primary point of contact or Jim Dawson as the project manager. While the solicitation number is not yet assigned, the forecast was posted in July 2026, signaling anticipated future procurement activity. Performance of the work is expected to align with the Port’s internal infrastructure needs, with no specified geographic restrictions beyond the Port’s operational scope.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Azure Consulting IDIQThe Port of Seattle is preparing to engage a cloud services partner through an Indefinite Delivery/Indefinite Quantity (IDIQ) contract to advance its Microsoft Azure and Hybrid cloud capabilities. The primary objective is to validate and strengthen the existing Azure architecture while guiding the implementation of new services in alignment with organizational standards, security requirements, and long-term scalability goals. The partner will be responsible for enhancing resiliency, improving the overall security posture, and ensuring that cloud deployments are optimized for performance, efficiency, and operational readiness across both cloud and on-premises environments. The engagement emphasizes strategic consultation and technical expertise in modernizing infrastructure, with a focus on ensuring all deployments adhere to best practices and support the Port’s evolving business needs. The solicitation is categorized under NAICS code 541512 for Computer Systems Design Services and is managed by the ICT Enterprise Infrastructure Services division. Point of contact for inquiries is Carol Hassard, with Jim Dawson serving as the Project Manager. While the solicitation number and set-aside details are not yet available, the forecasted posting date is July 29, 2026, and the place of performance will be at the Port of Seattle’s facilities.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is forecasting the replacement of its existing Flight Information Display System software to modernize airport operations and enhance passenger experience. This initiative targets the development and deployment of new software that will replace legacy systems, ensuring real-time flight data accuracy, improved reliability, and seamless integration with current airport infrastructure. The project falls under NAICS code 541512, indicating it involves custom computer programming services tailored to the specific operational needs of the airport environment, with the primary place of performance located at the Port of Seattle facilities. The primary point of contact for this opportunity is Farlis Lewis, reachable via email and phone, with Krista Sadler serving as the project manager for technical oversight. The solicitation is classified as a forecast, meaning no formal request for proposals has been issued yet, but interested vendors should prepare for an upcoming procurement process. The agency has not specified a set-aside type, suggesting the opportunity is open to all eligible contractors without preferential sizing or socioeconomic considerations. Although the exact timeline and requirements remain undeclared, stakeholders are encouraged to monitor the official portal link for future updates and formal solicitations.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Electronic Invoicing and Payment Processing SupportThe contract titled Electronic Invoicing and Payment Processing Support requires vendors to provide comprehensive support for the submission of electronic invoices in searchable PDF format, ensuring compatibility with automated systems and enabling efficient retrieval and processing of invoice data. Additionally, vendors must facilitate enrollment in PayMode by Bottomline Technologies to enable secure, streamlined electronic payments, reducing manual intervention and improving payment cycle efficiency. This subcontract is issued by Philadelphia Gas Works under the NAICS code 541512 for systems and software services, and the response deadline is August 12, 2026, with the posting date set for July 29, 2026. All performance is expected to align with the agency’s operational requirements for digital financial workflows, though specific geographic performance location details are not provided.

Philadelphia Gas Works

POSTED

DEADLINE

Cybersecurity Compliance Support (NIST SP 800-171)

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance and CUI SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 Revision 2 controls to safeguard Controlled Unclassified Information within the contractor’s systems and environments. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CUI in alignment with federal cybersecurity standards. The contractor must also comply with incident reporting requirements mandated by DFARS 252.204-7012, ensuring timely notification and remediation of any cybersecurity events affecting CUI. All activities must be performed under a Total Small Business Set-Aside, reserved exclusively for small businesses as defined by the SBA, and the work is classified under NAICS code 541512 for Computer Systems Design Services. The contract is structured as a subcontract and is associated with the Department of Defense’s Land Supply Chain organization. Responses must be submitted by the deadline of August 28, 2026, with the expectation that performance will occur within the defense supply chain environment.

LAND SUPPLY CHAIN

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and assessment of cybersecurity controls to safeguard Controlled Unclassified Information in accordance with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement requirements. The work is focused on ensuring compliance within a subcontracting environment, with performance taking place at Hill Air Force Base, Utah, 84056-5734. The solicitation is categorized under NAICS code 541512, indicating it pertains to computer systems design services, and is managed by the Department of Defense’s ASC SUPPLIER OPER AE AND AF DIV. Responses must be submitted by August 6, 2026, with the opportunity posted on July 29, 2026, leaving a narrow window for offerors to prepare and submit their proposals. The objective is to validate that all technical and procedural cybersecurity measures meet federal standards for protecting sensitive but unclassified data throughout the contractor’s systems and operations.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity & CUI Safeguarding

LAND SUPPLY CHAIN

POSTED

DEADLINE

Cybersecurity Compliance & CUI SafeguardingThe contract requires the implementation and thorough documentation of NIST Special Publication 800-171 controls to safeguard Controlled Unclassified Information (CUI) within a Department of Defense environment. This includes developing a System Security Plan (SSP) that accurately reflects the security posture, controls in place, and risk mitigation strategies aligned with NIST standards. The contractor must ensure all systems handling CUI are fully compliant with the required cybersecurity framework, addressing technical, administrative, and physical safeguards as outlined in the publication. Additionally, the contractor is responsible for establishing and maintaining procedures for timely cyber incident reporting in accordance with federal requirements, ensuring rapid response and transparency in the event of a breach or anomaly. The work is scoped as a subcontract under the MARITIME SUPPLY CHAIN ESOC BUYS with performance centered at FPO, zip 96632, and is classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 29, 2026, with responses due by August 10, 2026, indicating a limited window for proposal submission. Compliance with these requirements is essential for maintaining the integrity and confidentiality of CUI, and failure to meet the specified controls or reporting obligations may result in contract non-compliance or termination. All activities must be conducted in alignment with Department of Defense cybersecurity policies and procedures, with documentation maintained to support audits and assessments.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Cybersecurity for Covered Defense Information (CDI) SafeguardingThe contract requires the implementation and maintenance of cybersecurity safeguards to protect covered defense information in accordance with NIST SP 800-171 and DFARS 252.204-7012, ensuring all systems handling such data meet federal security standards. This includes continuous system monitoring, detection of unauthorized access or anomalies, and timely reporting of cybersecurity incidents as mandated by regulation. The work must be performed at the specified place of performance in Saint Charles, Missouri, with all security controls designed to safeguard sensitive information across the entire lifecycle of the systems involved. This is a subcontract under the Department of Defense, specifically for the ASC Commodities Division, and is classified under NAICS code 541512 for computer systems design services. Responses are due by August 6, 2026, and the opportunity was posted on July 29, 2026. All contractors must demonstrate the ability to meet stringent compliance requirements, maintain documentation of security controls, and support audits or assessments to verify adherence to NIST and DFARS standards. The success of this contract depends on rigorous execution of cybersecurity practices and immediate response protocols to mitigate risks to protected defense information.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cyber Incident Reporting & CUI Safeguarding (NIST SP 800-171)The contract requires comprehensive cybersecurity compliance support to ensure adherence to NIST Special Publication 800-171 standards for the protection of Controlled Unclassified Information within the Nuclear Reactor Program under the Department of Defense. The scope includes implementing and maintaining security controls to safeguard CUI, as well as establishing and executing procedures for timely cyber incident reporting in accordance with DFARS clauses. The work is to be performed at the designated location in Bremerton, Washington, with a firm deadline for responses set for August 10, 2026. This subcontract is classified under NAICS code 541512, indicating it involves computer systems design and related services, and is intended to strengthen the defense supply chain’s cybersecurity posture against evolving threats.

NUCLEAR REACTOR PROGRAM

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense InformationThis contract requires the implementation and documentation of NIST SP 800-171 security controls to safeguard covered defense information and ensure timely reporting of cyber incidents as mandated by the Defense Federal Acquisition Regulation Supplement. The work is part of a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with performance located at Fort Stewart, Georgia, 31314-5185. The contractor must fully align with NIST’s framework for protecting sensitive federal information and comply with all DFARS requirements regarding incident response, documentation, and continuous security posture maintenance. The solicitation was posted on July 29, 2026, with responses due by August 10, 2026, and is classified under NAICS code 541512 for computer systems design services. The contract emphasizes adherence to federal cybersecurity standards without specifying any set-aside classifications, indicating it is open to eligible subcontractors regardless of business size or status. The successful party will be responsible for not only deploying technical safeguards but also generating comprehensive documentation to demonstrate compliance with all applicable controls and reporting obligations throughout the contract lifecycle.

Defense Logistics Agency

POSTED

DEADLINE

More opportunities from Department Of Defense → MARITIME SUPPLY CHAIN

Same awarding agency

Invalid Knowledge Base ReferenceThe contract is a subcontract flagged for a Service-Disabled Veteran-Owned Small Business Set-Aside, indicating eligibility and preference for businesses owned by service-disabled veterans. It was posted on July 29, 2026, with a response deadline of August 10, 2026, and is managed by the Maritime Supply Chain under the Department of Defense. The place of performance is specified as Corpus Christi, Texas, with a zip code of 78419-5255, though no exact address or point of contact information is provided. The North American Industry Classification System code is listed as NA, and the agency organization details are incomplete, preventing full contract decomposition or analysis. The solicitation number is absent, and the contract can be accessed via a DIBBS link, but no prime contract data or vendor details are available for review.

POSTED

DEADLINE

Piston Ring Supply and ComplianceThe contract entails the supply of a single military-specification piston ring identified by NSN 4310017064138 and part number 18-20419-12R1, manufactured and delivered in full compliance with U.S. Department of Defense standards. Delivery requirements include strict adherence to MIL-STD-129 for item labeling and MIL-STD-2073-1E for packaging, ensuring the component is properly marked, protected, and documented for military logistics. The piston ring must also meet hazardous material handling protocols and be processed through the Defense Logistics Agency fulfillment system to guarantee seamless integration into the military supply chain. The solicitation is classified as a subcontract under NAICS code 333912, issued by the Maritime Supply Chain division of the Department of Defense, with performance required at FPO and a zip code of 09591. Bidders must submit their proposals by the deadline of August 10, 2026, with the opportunity originally posted on July 29, 2026. All suppliers are expected to fulfill documentation, packaging, and compliance specifications without exception, as nonconformity will result in rejection regardless of product quality. Access to the official solicitation details is available through the DIBBS platform using the provided link.

Air and Gas Compressor Manufacturing

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense InformationThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. All systems and processes must be configured to meet the full suite of controls outlined in the NIST publication, covering areas such as access control, audit, configuration management, and incident response. In addition to maintaining these protections, the contractor is obligated to report any cyber incidents involving covered defense information within 72 hours of discovery, with full cooperation in investigations and remediation efforts. This is a subcontract under the Department of Defense’s Maritime Supply Chain initiative, with performance expected to take place at an FPO address identified by the zip code 96675. The North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services. The solicitation was posted on July 29, 2026, and responses must be submitted by August 10, 2026. While no specific set-aside designation is provided, the contract is managed through the DLA DIBBS platform, and strict adherence to the timeline and cybersecurity requirements is mandatory for award consideration.

Computer Systems Design Services

POSTED

DEADLINE

Hazardous Materials Compliance & Labeling SupportThe contract seeks specialized support for hazard communication related to electrical components containing hazardous materials, requiring the preparation of compliant hazard warning labels and Material Safety Data Sheets (MSDS) in accordance with regulatory standards. The work is intended to ensure that all hazardous substances within these components are properly identified, documented, and communicated to downstream users and handlers, mitigating safety risks and maintaining regulatory compliance across the supply chain. The contractor must possess the technical expertise to interpret chemical hazards and translate them into accurate, standardized safety documentation. This subcontract is issued under NAICS code 541690 and is managed by the Department of Defense through the Maritime Supply Chain organization. The place of performance is designated as FPO with a ZIP code of 96675, indicating operations may involve military or overseas logistics environments. Proposals must be submitted by August 10, 2026, following the solicitation posted on July 29, 2026. While no set-aside type is specified, the solicitation is accessible via the DIBBS platform, emphasizing the need for timely and precise adherence to federal procurement protocols for defense-related hazardous materials compliance.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Supply of Magnetic Contactors / Motor StartersThe contract requires the manufacture, testing, packaging, and delivery of magnetic contactors designated by NSN 6110014119297, commonly referred to as motor starters, strictly in accordance with military specifications to ensure reliability and performance under demanding operational conditions. The work must meet all applicable defense standards for quality, durability, and safety, with full compliance expected throughout the production and quality assurance processes. These components are critical for military equipment functionality and must be produced with precision to ensure seamless integration into existing systems. The solicitation is issued as a subcontract under the Department of Defense through the Maritime Supply Chain, with a response deadline of August 10, 2026, and the place of performance designated as FPO with ZIP code 96675. The NAICS code 335313 identifies the industry as Electric Lighting Equipment, Electrical Equipment, and Appliance, and Motor and Generator Manufacturing, aligning with the technical scope of the required components. All deliverables must be fully packaged and labeled per military logistics requirements for secure and efficient distribution to designated operational units.

Switchgear and Switchboard Apparatus Manufacturing

POSTED

DEADLINE

Centrifugal Pump Impeller SupplyA single centrifugal pump impeller with a diameter of 8.1875 inches is being procured under a small business set-aside subcontract, exclusively available to small businesses as defined by the SBA under FAR 19.5. The item must comply strictly with military standards for packaging, marking, and hazardous materials handling to ensure safe and standardized handling throughout the defense supply chain. The solicitation is managed by the Maritime Supply Chain under the Department of Defense, with performance required at the specified location in New Cumberland, Pennsylvania, 17070-5002. The North American Industry Classification System code assigned is 333996, indicating the procurement falls under other miscellaneous manufacturing. The opportunity was posted on July 29, 2026, and responses are due by August 10, 2026, with all submissions expected to meet the technical, regulatory, and procedural requirements outlined for defense contracts.

Fluid Power Pump and Motor Manufacturing

POSTED

DEADLINE

Technical Data and Export Control ManagementThe contract pertains to the management of technical data subject to International Traffic in Arms Regulations and Export Administration Regulations, requiring strict control over access, handling, and dissemination to ensure compliance with U.S. export control requirements. It mandates the implementation of processes for authorizing foreign national access to controlled technical data, including screening, documentation, and ongoing monitoring to prevent unauthorized disclosure. All activities must adhere to federal export control standards and maintain the integrity of sensitive information throughout its lifecycle. This is a total small business set-aside subcontract under NAICS code 541618, issued by the Department of Defense through the Maritime Supply Chain organization. The opportunity was posted on July 29, 2026, with responses due by August 10, 2026. Performance is expected to take place in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The contracting mechanism is designed to prioritize small business participation, and the work involves specialized expertise in export compliance, technical data security, and regulatory adherence within the defense supply chain ecosystem.

Other Management Consulting Services

POSTED

DEADLINE

Domestic Transportation and FOB Origin LogisticsThe contract requires the domestic transportation of 26 marine doors from the manufacturer to the Defense Logistics Agency facility in New Cumberland, Pennsylvania, under FOB Origin terms, meaning the buyer assumes all responsibility and costs once the goods leave the seller’s location. The contractor must ensure full tracking of the shipment and provide complete delivery documentation upon arrival. This is a subcontract awarded under a Total Small Business Set-Aside, exclusively for small businesses as defined by the SBA, with the NAICS code 484220 indicating surface transportation of freight. The opportunity was posted on July 29, 2026, with responses due by August 10, 2026, and is managed by the Maritime Supply Chain organization under the Department of Defense. Delivery must be completed at the designated zip code 17070-5002, and the contractor is expected to meet all logistical requirements without additional support from the government beyond the specified terms.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Military Packaging, Labeling, and Hazardous Materials ComplianceThe contract requires comprehensive packaging and labeling of marine doors in strict adherence to MIL-STD-129 and MIL-STD-2073-1E standards, ensuring military-grade documentation, barcoding, and container marking for defense logistics. Additionally, compliance with OSHA hazard communication regulations is mandatory, including the accurate generation and inclusion of Safety Data Sheets (SDS) for any hazardous materials involved in the manufacturing or packaging process. All work must be executed under a Total Small Business Set-Aside, reserved exclusively for small businesses as defined by the SBA, with the NAICS code 561910 indicating the scope involves support activities for material handling and packaging services. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and responses are required by August 10, 2026, following a posting date of July 29, 2026. This is a subcontract opportunity issued under the Department of Defense through the Maritime Supply Chain organization, with all technical and regulatory requirements centered on defense logistics compliance and hazardous materials safety.

Packaging and Labeling Services

POSTED

DEADLINE

Manufacture of Metal Marine DoorsThe contract seeks the fabrication of 26 metal marine doors, each with a clear opening of 26 inches by 66 inches, specified under NSN 2040-01-253-4544, and must fully comply with military standards for durability and performance in harsh marine environments. The work will be performed at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the doors must be manufactured to meet exacting defense-grade requirements for corrosion resistance, structural integrity, and operational reliability under saltwater exposure and extreme conditions. This is a small business set-aside subcontract under the SBA program, classified under NAICS code 332312, ensuring eligibility is restricted to qualifying small businesses. The solicitation was posted on July 29, 2026, with a response deadline of August 10, 2026, and is administered by the Maritime Supply Chain organization within the Department of Defense. While no point of contact or detailed technical specifications are provided in the data, bidders are expected to fully understand and adhere to the referenced NSN and associated military specifications for marine door systems, and submissions must align with the set-aside criteria to be considered for award.

Fabricated Structural Metal Manufacturing

POSTED

DEADLINE

Small Business Subcontracting Participation (Administrative Support)The contract seeks administrative and compliance support services to facilitate small business participation and ensure adherence to Department of Defense subcontracting reporting requirements. The primary objective is to assist in meeting federal small business goals through proper documentation, tracking, and submission of subcontracting data in alignment with regulatory standards. The work is tied to NAICS code 541611, indicating a focus on management consulting services, and will be performed in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 29, 2026, and responses are due by August 10, 2026. Although no specific set-aside designation is listed, the effort is embedded within the broader DOD framework to promote small business engagement across the maritime supply chain. Submission must be made through the DIBBS platform using the provided link, and all activities must support accurate and timely compliance with federal subcontracting obligations.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Electronic Component Packaging and Marking ServicesThe contract seeks specialized packaging and marking services for electronic components to ensure strict traceability between leaded and lead-free variants, aligning with military logistics standards for compliance and reliability. All work must adhere to rigorous requirements designed to prevent cross-contamination and maintain identity throughout the supply chain, supporting Department of Defense operations with fully auditable component provenance. The services are vital for sustaining mission-critical systems where material integrity and regulatory conformity are non-negotiable. Performance is required at Tracy, California, with a zip code of 95304-5000, and the opportunity is classified as a subcontract under NAICS code 385210. Proposals must be submitted by August 10, 2026, with the solicitation publicly posted on July 29, 2026, through the DIBBS platform. The contracting entity is the Maritime Supply Chain under the Department of Defense, emphasizing the operational importance of this effort within military aerospace and defense infrastructure.

POSTED

DEADLINE