Cybersecurity and CMMC Compliance Implementation

The contract requires the implementation and ongoing maintenance of cybersecurity safeguards to protect Covered Defense Information in full alignment with DFARS 252.204-7012 and NIST SP 800-171 standards, with a mandatory requirement to achieve and sustain CMMC Level 2 certification. All cybersecurity controls, processes, and monitoring systems must be fully operational to ensure the confidentiality, integrity, and availability of sensitive defense data handled under this agreement. The contractor is obligated to establish robust incident detection and reporting procedures, ensuring immediate notification and remediation of any cybersecurity events involving CDI. This is a small business set-aside subcontract issued by the Department of Defense under the ASC SUPPLIER OPER AE AND AF DIV, with performance located in Cherry Point, North Carolina, 28533-5040. The solicitation is categorized under NAICS code 541512 for computer systems design services and is open for response until July 23, 2026. The contractor must demonstrate compliance with both technical and administrative requirements of the cybersecurity framework and maintain documentation to support audit readiness at all times throughout the contract period.