Cybersecurity and CMMC Compliance (CMMC Level 2)

This contract requires the implementation and documentation of cybersecurity controls aligned with NIST SP 800-171 and CMMC Level 2 standards for systems that handle Controlled Unclassified Information. The work is focused on ensuring full compliance with federal cybersecurity requirements to protect sensitive data within the Department of Defense's Nuclear Reactor Program. The subcontractor must establish, validate, and maintain a robust security posture that meets all applicable control families outlined in the frameworks, including access control, audit and accountability, configuration management, and incident response. Performance is expected to occur at the specified location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. The North American Industry Classification System code is 541512, indicating this is for computer systems design and related services. As a subcontract, this effort is part of a larger procurement effort under the Department of Defense, and successful bidders must demonstrate proven capability in delivering CMMC Level 2 compliance services, including thorough documentation and evidence of implemented controls for potential audits and assessments.