Cybersecurity & CUI Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of CMMC Level 2 controls to safeguard Controlled Unclassified Information in accordance with NIST SP 800-171 and DFARS 252.204-7012, ensuring robust cybersecurity posture across all systems handling CUI. This subcontract is focused on achieving and sustaining compliance through technical, administrative, and physical safeguards aligned with federal cybersecurity standards, with performance expected at the New Cumberland facility, ZIP 17070-5002. The project demands thorough documentation, continuous monitoring, and incident response capabilities to meet DoD requirements without deviation. The solicitation was posted on July 23, 2026, with a response deadline of August 3, 2026, and falls under NAICS code 541512 for custom computer programming services. It is issued by the Department of Defense through the DDS New Cumberland Facility and does not specify a set-aside type. Contractors must be prepared to demonstrate full alignment with CMMC Level 2 requirements, including access controls, audit and accountability measures, system and communications protection, and workforce training. All activities must be performed onsite at the designated location, and compliance must be maintained throughout the contract duration to ensure uninterrupted eligibility for DoD work involving CUI.