Cybersecurity and CMMC Compliance Support

The contract requires the implementation and ongoing maintenance of cybersecurity controls to achieve and sustain compliance with CMMC Level 2 and NIST SP 800-171 standards, specifically for the protection of covered defense information. This subcontract focuses on ensuring robust security practices are in place across systems and processes that handle sensitive Department of Defense data, aligning with federal cybersecurity requirements designed to mitigate risks from unauthorized access, data exfiltration, and cyber threats. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with all deliverables meeting the technical and compliance benchmarks established by the Defense Industrial Base cybersecurity framework. All proposals must be submitted by the stated deadline of August 14, 2026, and the contract falls under NAICS code 541512, which classifies it as computer systems design and related services. The contracting activity is managed by the Land Supply Chain under the Department of Defense, indicating the work supports critical defense logistics and infrastructure. Contractors are expected to demonstrate proven experience in CMMC and NIST compliance, including documentation, audits, continuous monitoring, and remediation processes. The subcontract may involve collaboration with other vendors or internal teams to complete control assessments, policy development, employee training, and system hardening efforts necessary for certification or re-certification under the CMMC program.