Cybersecurity and CMMC Compliance for Defense Repair Operations

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 Rev. 2 security controls on all systems that handle covered defense information, ensuring alignment with the Cybersecurity Maturity Model Certification (CMMC) framework to meet Department of Defense requirements. Compliance must extend to all aspects of cyber incident reporting as mandated by DFARS 252.204-7012, including timely detection, documentation, and notification of any security breaches or anomalies affecting protected data. The work is scoped to support defense repair operations and must be performed at the designated location in Mechanicsburg, with all activities tied to the NAICS code 541512 for computer systems design services. This subcontract is open for response until May 18, 2026, and is issued under the Naval Supply Systems Command Weapon Systems Support, reflecting the Department of Defense’s emphasis on securing supply chain cybersecurity across contractor systems.