Cybersecurity Compliance and CMMC Level 2 Implementation

The contract requires full implementation of NIST SP 800-171 security controls and attainment of CMMC Level 2 certification for all systems processing, storing, or transmitting covered defense information. This effort is critical to ensuring compliance with Department of Defense cybersecurity standards and must be completed in alignment with mandatory framework requirements to safeguard sensitive data. The work is scoped as a subcontract under the Nuclear Reactor Program and will be performed at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026, under NAICS code 541512 for computer systems design services. All activities must be executed within the timeframe to satisfy federal cybersecurity obligations without delay or compromise.