Cybersecurity & CMMC Level 2 Compliance

The contract requires full implementation of NIST SP 800-171 security controls and ongoing maintenance of CMMC Level 2 compliance for systems that handle controlled unclassified information, in accordance with DFARS requirements. This effort is focused on ensuring robust cybersecurity practices are embedded across all relevant infrastructure to protect sensitive data from unauthorized access, disclosure, or compromise. Compliance must be sustained through continuous monitoring, documentation, and adherence to the established framework as mandated by federal defense contracting standards. This subcontract is solicited by the ASC Commodities Division under the Department of Defense, with performance required at New Cumberland, Pennsylvania, zip code 17070-5002. The North American Industry Classification System code is 541512, indicating the work falls under computer systems design services. The solicitation was posted on July 16, 2026, with responses due by July 24, 2026, and applicants must demonstrate technical capability to meet both the technical controls and compliance documentation standards for CMMC Level 2, including policies, procedures, and audit readiness for third-party assessments.