Cybersecurity & Compliance Support for CDI Handling

The contract requires support for safeguarding Covered Defense Information during order processing and documentation, with a focus on achieving CMMC Level 2 self-assessment and full compliance with DFARS 252.204-7012 requirements. This includes implementing and maintaining cybersecurity controls necessary to protect sensitive defense data throughout the supply chain lifecycle, ensuring all systems, processes, and personnel adhere to federal standards for information security. The work involves conducting internal assessments, documenting compliance posture, and preparing for potential third-party evaluations to validate adherence to the Cybersecurity Maturity Model Certification framework. This subcontract is a total small business set-aside under SBA guidelines and falls under NAICS code 541512, indicating it is targeted toward computer systems design and related services. The performance location is specified as Columbus, Ohio, with a response deadline of July 31, 2026, and the solicitation was posted on July 20, 2026. The contracting entity is part of the Department of Defense under the Maritime Supply Chain organizational structure, and the effort is directly tied to securing defense-related information exchanged during procurement and logistics operations. All proposed solutions must align with federal cybersecurity mandates and demonstrate a robust, scalable approach to maintaining compliance without relying on external certifications at the time of award.