Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity and CMMC Compliance Support

Active

Federal

Response Deadline08/20/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract seeks support for achieving and maintaining CMMC Level 2 compliance to handle Covered Defense Information, requiring comprehensive cybersecurity measures including the development and implementation of policies, system assessments, access controls, and audit readiness protocols. The scope encompasses all necessary activities to align with the Cybersecurity Maturity Model Certification framework, ensuring the contractor can securely process, store, and transmit sensitive defense data in accordance with federal requirements. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is tied to the Department of Defense through the LAND SUPPLY CHAIN organization, with performance expected at a location in Chambersburg, Pennsylvania, zip code 17201-4150. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, and bidders must demonstrate proven experience in CMMC compliance, defense information handling, and documented success in supporting similar federal cybersecurity projects.

General Info

Achieve CMMC Level 2 compliance for secure defense data handling in Chambersburg, PA, with proven federal cybersecurity experience.

Agency

Department Of Defense → LAND SUPPLY CHAINView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

CHAMBERSBURG, PA, 17201-4150, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 9

subcontract

Response DeadlineAug 20

Submission deadline

Response Deadline

08/20/2026, 05:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → LAND SUPPLY CHAIN

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → LAND SUPPLY CHAIN

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Support CMMC Level 2 compliance for handling Covered Defense Information, including policy development, system assessments, access controls, and audit readiness.

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 5 hours ago

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

LAND SUPPLY CHAIN

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

JACKSONVILLE BLDG

POSTED

about 5 hours ago

DEADLINE

CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.

ACTIVE DEVICES DIVISION

POSTED

about 5 hours ago

DEADLINE

Cybersecurity and CUI SafeguardingThe contract entails the implementation and ongoing maintenance of comprehensive cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for systems handling controlled unclassified information. The work is focused on safeguarding CUI within the operational environment at Robins Air Force Base, Georgia, under the Department of Defense’s Warner Robins organization. The contractor must establish, validate, and sustain a robust security posture that aligns with federal requirements, addressing technical, administrative, and physical controls necessary to protect sensitive data from unauthorized access, disclosure, or compromise. This is a subcontract opportunity with a NAICS code of 541512, indicating it pertains to computer systems design services. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, providing a tight window for qualified entities to submit proposals. Performance must be executed at the specified location in Robins AFB, and the contractor is expected to demonstrate proven experience in delivering CMMC and NIST compliance solutions, including documentation, auditing, and continuous monitoring capabilities. The absence of a set-aside designation means the opportunity is open to all eligible small and large businesses, with evaluation likely centered on technical capability, past performance, and compliance readiness.

POSTED

about 5 hours ago

DEADLINE

Cybersecurity & Controlled Unclassified Information (CUI) SafeguardingThe contract requires the implementation of NIST Special Publication 800-171 controls to protect covered defense information and ensure compliance with DFARS 252.204-7012, mandating robust cybersecurity measures for safeguarding controlled unclassified information. This includes establishing and maintaining security controls across systems handling such data, as well as defining clear procedures for detecting, reporting, and responding to cyber incidents in accordance with federal requirements. The effort is scoped as a subcontract under the Department of Defense, with performance expected at Tinker Air Force Base, Oklahoma, 73145-8000. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, under NAICS code 541512, which pertains to computer systems design services. The work supports the broader DoD objective of securing sensitive information across the defense industrial base and requires full alignment with NIST 800-171 standards, covering areas such as access control, audit, configuration management, and incident response. Failure to implement and maintain these controls could result in noncompliance penalties and jeopardize contract execution.

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance & Incident Reporting (NIST SP 800-171)The contract requires support to a prime contractor in achieving and maintaining compliance with NIST SP 800-171 cybersecurity controls, ensuring that all required safeguards are properly implemented across systems handling controlled unclassified information. A critical obligation is the timely reporting of any cyber incidents to the Department of Defense within a strict 72-hour window as mandated by DFARS clauses, emphasizing rapid detection, response, and documentation of potential security breaches. The work will be performed at Robins Air Force Base with a zip code of 31098-1626, and the subcontract falls under NAICS code 541512 for computer systems design services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, with the contracting organization identified as the Active Devices Division under the Department of Defense.

ACTIVE DEVICES DIVISION

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)This contract requires the implementation and assessment of cybersecurity controls to achieve compliance with CMMC Level 2 and NIST SP 800-171 standards for the protection of covered defense information. The work is focused on ensuring that all required security controls are properly configured, documented, and validated to meet federal requirements for handling sensitive unclassified information within the defense industrial base. The subcontract is designated as a Total Small Business Set-Aside under SBA guidelines, meaning only small businesses are eligible to respond, and the NAICS code 541512 indicates the work falls under Custom Computer Programming Services. Performance is to be conducted at Hill Air Force Base, Utah, with a response deadline of August 17, 2026, and the solicitation was posted on August 9, 2026. The contracting activity falls under the ASC Commodities Division of the Department of Defense.

ASC COMMODITIES DIVISION

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance & CUI SafeguardingThe contract requires implementation and maintenance of cybersecurity controls to ensure full compliance with DFARS 252.204-7012 and NIST SP 800-171 standards, specifically to safeguard Controlled Unclassified Information (CUI) on systems supporting the prime contractor. All subcontractor systems handling CUI must meet these federal requirements, including robust access controls, audit logging, media protection, incident response, and regular system assessments to prevent unauthorized access or data loss. Compliance is mandatory and ongoing throughout the contract lifecycle, with continuous monitoring and documentation to demonstrate adherence. This subcontract is issued under the NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Aviation Supply Chain ESOC Buys office. The place of performance is designated as FPO, 96632, indicating operations may occur in deployed or overseas contexts. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026. Bidders must demonstrate proven ability to meet CUI protection requirements, maintain secure systems, and provide evidence of compliance readiness, as failure to meet these standards may result in contract termination or loss of eligibility for future DoD work.

AVIATION SUPPLY CHAIN ESOC BUYS

POSTED

about 5 hours ago

DEADLINE

Cybersecurity & Information Safeguarding (NIST SP 800-171)This contract requires the implementation of NIST SP 800-171 controls to ensure the protection of contract information during access or transmission, focusing on safeguarding sensitive data associated with the work. The effort is scoped as a subcontract under a Women-Owned Small Business Set-Aside, with a NAICS code of 541512 indicating it pertains to custom computer programming services. The solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026, and the place of performance is designated as Tracy, California, with a zip code of 95304-5000. The awarding agency is the DLA Dist San Joaquin under the Department of Defense, and the obligation centers on meeting federal cybersecurity standards to maintain the confidentiality, integrity, and availability of information handled under the agreement.

DLA DIST SAN JOAQUIN

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance (NIST SP 800-171) ImplementationThe contract requires the implementation and documentation of cybersecurity safeguards mandated by NIST Special Publication 800-171 to protect Controlled Unclassified Information in alignment with Defense Federal Acquisition Regulation Supplement requirements. The work involves deploying technical, administrative, and physical controls to ensure compliance across all systems handling such information, with full documentation to demonstrate adherence to each of the 110 security requirements outlined in the NIST framework. Execution must be completed within the specified performance timeline and verified through auditable records, ensuring readiness for government assessment. This subcontract is issued under the Department of Defense’s Defense Logistics Agency with a NAICS code of 541512, indicating it falls under Computer Systems Design and Related Services. The place of performance is listed as FPO with a ZIP code of 96322-0001, suggesting operations may occur in a deployed or mobile military environment. The solicitation opened on August 9, 2026, and responses are due by August 20, 2026, with all work tied to meeting stringent federal cybersecurity standards for defense contractors handling sensitive but unclassified data.

Defense Logistics Agency

POSTED

about 5 hours ago

DEADLINE

More opportunities from Department Of Defense → LAND SUPPLY CHAIN

Same awarding agency

Supply Chain and Subcontract Management for Defense ContractsThis contract governs logistics and subcontract management activities critical to defense supply chain operations, requiring strict adherence to federal cybersecurity and procurement compliance standards. Participants must track and verify CAGE codes and UEIs for all subcontractors to ensure accurate identification and eligibility, while fully complying with DFARS 252.204-7016 to exclude prohibited telecom equipment from the supply chain. All invoicing must be submitted through the Wide Area WorkFlow system to maintain accurate financial records and ensure timely payment processing. The work is performance-based at Tracy, California, with a target date of August 20, 2026, for bid submissions, under a NAICS code indicating freight transportation services. As a subcontract under the Department of Defense’s Land Supply Chain organization, this effort demands rigorous documentation, real-time compliance monitoring, and coordination across the extended vendor network to uphold national security standards.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

about 5 hours ago

DEADLINE

Hazardous Material Compliance and LabelingThe contract titled Hazardous Material Compliance and Labeling requires the provision of specialized services to ensure full adherence to federal and military regulations governing the labeling of hazardous materials. Specifically, the contractor must comply with DFARS 252.223-7001, OSHA 1910.1200, and MIL-STD-129, which mandate accurate hazard communication, standardized labeling formats, and uniform packaging identification for defense-related shipments. The work is performance-based and must be executed to support the Department of Defense’s logistics infrastructure, with all activities centered at the designated place of performance in Tracy, California, zip code 95304-5000. The subcontract is classified under NAICS code 541620, indicating it involves management consulting services related to compliance and operational safety standards. The solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026, and is managed by the Land Supply Chain organization within the Department of Defense. While no set-aside designation or point of contact is specified, the contract expects the contractor to deliver precise, auditable labeling systems that meet stringent military and occupational safety requirements. The services are critical to maintaining regulatory compliance across the supply chain, preventing mislabeling risks, and ensuring the safe handling, transportation, and storage of hazardous substances within defense operations.履约必须符合所有适用法规的字面要求和实质意图，确保标签内容完整、清晰、持久且在各种环境条件下保持可读性。

Environmental Consulting Services

POSTED

about 5 hours ago

DEADLINE

Military-Compliant Packaging and Marking ServicesThe contract requires full compliance with MIL-STD-2073-1E for the packaging and marking of defense components intended for shipment, as well as adherence to MIL-STD-129 for their storage, ensuring all items are prepared to military standards for durability, traceability, and environmental protection. Hazardous materials must be properly identified and labeled in accordance with applicable regulations, integrating safety and regulatory requirements into every phase of packaging and marking operations. Work must be performed at the designated place of performance in Tracy, California, 95304-5000, with all deliverables subject to rigorous quality control to meet Department of Defense expectations. This is a subcontract opportunity under the NAICS code 493190, issued by the Land Supply Chain within the Department of Defense, with a response deadline of August 20, 2026. The solicitation is open to qualified subcontractors capable of executing military-grade packaging and labeling processes, requiring precise documentation, material handling, and compliance with federal defense standards. All work must align with the technical specifications outlined in the referenced military standards and must be executed without deviation to ensure compatibility with military logistics systems and supply chain integrity.

Other Warehousing and Storage

POSTED

about 5 hours ago

DEADLINE

Precision Machined Component ManufacturingThe contract encompasses the precision manufacturing of a military-grade guide, cam follower, and folding floor component, with all production strictly required to adhere to approved engineering drawings and meet exact form-fit-function specifications. The component must comply with all technical requirements outlined in the DLA Master List, ensuring full interoperability and reliability under demanding operational conditions. Production is to be performed at the designated place of performance in Tracy, California, with the zip code 95304-5000, and must fulfill rigorous defense standards for quality and consistency. This subcontract, posted on August 9, 2026, with a response deadline of August 20, 2026, falls under the NAICS code 332721 for Metal Forge and Stampings, and is issued by the Department of Defense through the Land Supply Chain organization. The work is critical to supply chain readiness and must be completed without deviation from specified technical parameters. While no set-aside designation is indicated, the nature of the component and the involvement of defense logistics require full compliance with applicable federal acquisition regulations, security protocols, and quality assurance procedures relevant to military-grade hardware manufacturing.

Precision Turned Product Manufacturing

POSTED

about 5 hours ago

DEADLINE

Hazardous Materials Compliance and Labeling ServicesThe contract requires the preparation and submission of hazard warning labels and Safety Data Sheets for the radiator assembly if it contains or is shipped with hazardous materials, ensuring full regulatory compliance with transportation and workplace safety standards. This work is critical for the safe handling, storage, and use of the component throughout its lifecycle and must adhere to national and international chemical safety guidelines. The effort is being procured as a subcontract under the NAICS code 541690, classified under environmental and other technical consulting services, and is managed by the Department of Defense through the Land Supply Chain office with performance required at Fort Bliss, Texas, ZIP 79918-0000. The solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026, indicating a narrow window for submission and evaluation. The contracting entity is focused on ensuring timely and accurate documentation to support logistical operations and regulatory compliance across defense supply chains. While specific requirements such as format, numbering conventions, or regulatory frameworks like GHS are not detailed here, adherence to applicable federal and international standards for hazard communication is implied and expected. This subcontract is not set aside for any specific small business category, and all qualified providers must meet the technical and documentation standards necessary to support DoD logistics and safety protocols.

Other Scientific and Technical Consulting Services

POSTED

about 5 hours ago

DEADLINE

Manufacture and Supply of Radiator Assembly (Military-Grade)The contract calls for the full manufacturing, testing, and delivery of a single military-spec radiator assembly identified by NSN 2930-01-566-8452 and Part Number 87719313. The product must meet all Department of Defense technical specifications and comply with DLA requirements for packaging, labeling, and environmental standards to ensure suitability for military operational environments. The radiator assembly is intended for use at Fort Bliss, Texas, with performance and delivery obligations tied to that location. This is a subcontract opportunity under NAICS code 336310, which classifies it within the automotive parts manufacturing sector, specifically for military-grade applications. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, providing a limited window for qualified vendors to submit proposals. The contracting activity is managed by the Land Supply Chain under the Department of Defense, and all work must adhere to strict military logistics and quality control protocols. The official solicitation link is available through the DIBBS system for further details and submission procedures.

Motor Vehicle Gasoline Engine and Engine Parts Manufacturing

POSTED

about 5 hours ago

DEADLINE

Export Control and Technical Data Management

Administrative Management and General Management Consulting Services

POSTED

about 5 hours ago

DEADLINE

Hazardous Materials and Safety Data Sheet (SDS) Compliance Support

Environmental Consulting Services

POSTED

about 5 hours ago

DEADLINE

Packaging, Preservation, and Marking Services

Other Warehousing and Storage

POSTED

about 5 hours ago

DEADLINE

Precision Machined Component Manufacturing – Clamp, Hub Assembly

Precision Turned Product Manufacturing

POSTED

about 5 hours ago

DEADLINE

Freight Transportation and Delivery to Pearl HarborThe contract requires the transportation of resilient mounts from the origin point to the Pearl Harbor Naval Shipyard, with a strict delivery deadline of 20 days after award. All sea transport must be conducted using U.S.-flagged vessels to comply with regulatory requirements, and the terms are structured under FOB Origin, meaning the seller bears responsibility for the goods until they are loaded onto the carrier at the point of origin. The delivery location is specified as Pearl Harbor, Hawaii, with a ZIP code of 96860-5033, and the cargo must reach this destination within the contracted time frame to meet operational timelines. The contract falls under NAICS code 484220 for truck transportation and is classified as a subcontract issued by the Department of Defense through its Land Supply Chain organization. The solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026, indicating a short window for interested parties to submit proposals. The place of performance is fixed at Pearl Harbor, and while no point of contact is listed, the official solicitation can be accessed through the DIBBS portal. The requirement for U.S.-flag vessels underscores national security and maritime compliance priorities, and timing is critical due to the 20-day ADO constraint, leaving no room for delays. All logistics, including inland movement to the port and oceanic transit, must be planned and executed to ensure seamless delivery by the deadline.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

about 5 hours ago

DEADLINE