Cybersecurity & CUI Compliance Services

The contract requires the implementation and ongoing maintenance of robust cybersecurity safeguards for systems handling Covered Defense Information, ensuring full compliance with the Defense Federal Acquisition Regulation Supplement clause 252.204-7012 and the Cybersecurity Maturity Model Certification Level 2 requirements. This includes establishing and sustaining technical, administrative, and physical controls to protect controlled unclassified information from unauthorized access, disclosure, or compromise, while maintaining continuous monitoring and incident response capabilities aligned with NIST SP 800-171 standards. All activities must be performed to meet the stringent cybersecurity expectations for defense subcontractors handling sensitive government data. The work is scoped under a subcontract classification with NAICS code 541512, targeting information technology services focused on cybersecurity compliance. Performance is to occur at the specified location in New Cumberland, Pennsylvania, with a response deadline of August 12, 2026. Participation is open to entities capable of demonstrating proven experience in securing CDI, achieving and sustaining CMMC Level 2 certification, and providing audit-ready documentation to validate compliance. The contracting activity falls under the Department of Defense, through the ASC SUPPLIER OPER OEM DIVISION, and underscores the critical need for reliable, certified cybersecurity infrastructure to support national defense objectives.