Cybersecurity Compliance and CMMC Level 2 Implementation

The contract requires the implementation of NIST SP 800-171 security controls and preparation for CMMC Level 2 certification, specifically to safeguard Covered Defense Information within the designated environment. This includes the development of a comprehensive System Security Plan and a Plan of Action and Milestones to document current security posture, identify gaps, and outline remediation steps in alignment with federal cybersecurity requirements. The work is focused on achieving and demonstrating compliance through documented processes, technical safeguards, and audit readiness, ensuring the contractor can securely handle sensitive defense data. Performance of this subcontract is centered at New Cumberland, Pennsylvania, with an emphasis on meeting DoD standards through rigorous documentation and control enforcement. The solicitation is for a subcontract under the Department of Defense and falls under NAICS code 541512 for computer systems design services. Respondents must submit their proposals by August 17, 2026, and the work is expected to support the broader supply chain security objectives of LAND SUPPLY CHAIN. There is no set-aside designation specified, and all qualified entities may respond to this requirement.