Cybersecurity Compliance and Reporting Services

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 Revision 2 and CMMC Level 2 standards to protect controlled unclassified information within the Department of Defense supply chain. The scope includes establishing, monitoring, and updating technical and administrative safeguards to ensure compliance with federal cybersecurity requirements, with a specific emphasis on incident reporting through DIBNet and the proper handling, containment, and reporting of malicious software. All activities must be performed at the designated place of performance in New Cumberland, Pennsylvania, with strict adherence to the timelines and procedural guidelines mandated by the Department of Defense. The contract is structured as a subcontract under a Total Small Business Set-Aside, meaning only small businesses certified by the Small Business Administration are eligible to respond. It falls under NAICS code 541512 for computer systems design services and is open for responses until July 7, 2026. The offering organization, Maritime Supply Chain, operates under the DoD and expects full compliance with federal acquisition regulations, particularly those governing cybersecurity posture, reporting obligations, and small business participation. All work must be executed in a manner that ensures continuous readiness for audit and alignment with evolving DoD cybersecurity frameworks.