Cybersecurity Compliance & CMMC Level 2 Implementation

The contract entails the development and comprehensive maintenance of a System Security Plan aligned with the protection of controlled uncontrolled information, requiring full adherence to NIST SP 800-171 standards and a self-assessment for CMMC Level 2 certification. The work involves documenting security controls, implementing necessary policies and procedures, and ensuring all systems handling CUI meet federal cybersecurity requirements for defense contractors. This effort must result in a validated and audit-ready compliance posture that supports ongoing contractual obligations under the Department of Defense’s cybersecurity framework. Performance is to be executed at the location in New Cumberland, Pennsylvania, with a deadline for responses set for May 20, 2026. As a subcontract under the agency designation ASC SUPPLIER OPER OEM DIVISION, the work is classified under NAICS code 541512 for computer systems design services. The contract requires technical expertise in cybersecurity compliance, including the ability to conduct gap analyses, remediate deficiencies, and produce documentation that demonstrates alignment with CMMC Level 2 controls. Timely and accurate execution is critical to support the defense supply chain's security posture and maintain eligibility for future DoD work.