Cybersecurity Compliance and Incident Response Support

The contract seeks comprehensive cybersecurity compliance and incident response support focused on achieving and maintaining NIST SP 800-171 and CMMC Level 2 standards, with responsibilities spanning self-assessment, incident reporting, and media preservation to ensure forensic readiness. The work involves implementing controls required by these frameworks, conducting internal evaluations to verify compliance, establishing protocols for timely and accurate incident reporting, and maintaining digital evidence in a manner that supports forensic investigations. All activities must align with Department of Defense expectations for protecting controlled unclassified information within systems handling sensitive defense data. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is tied to the ACTIVE DEVICES DIVISION within the Department of Defense. Performance is required at the location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 22, 2026, and responses must be submitted by August 6, 2026. The scope emphasizes operational readiness and continuous compliance monitoring, requiring the contractor to provide actionable, auditable processes that demonstrate adherence to federal cybersecurity requirements relevant to defense supply chain partners.