Cybersecurity and CUI Safeguarding (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information in alignment with NIST SP 800-171 and the DFARS clause 252.204-7012, with the ultimate goal of achieving CMMC Level 2 compliance. This entails establishing robust technical, administrative, and physical safeguards to protect controlled unclassified information, ensuring all systems and processes meet the required security standards for handling sensitive government data. The contractor must demonstrate continuous compliance through documented policies, personnel training, system hardening, and regular audits to maintain readiness for third-party assessment. This is a subcontract under the Department of Defense, specifically managed by the Fluid Handling Division, with performance taking place in New Cumberland, Pennsylvania, ZIP 17070-5002. The North American Industry Classification System code 541512 indicates the work involves computer systems design and related services. The solicitation was posted on July 5, 2026, with proposals due by July 16, 2026. All activities must align with federal cybersecurity mandates, and the contractor is expected to provide evidence of compliance throughout the contract lifecycle, including incident response capabilities, access controls, and data encryption measures consistent with CMMC Level 2 requirements.