Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with CMMC Level 2 and NIST SP 800-171 standards for all contractor systems that process, store, or transmit controlled unclassified information. This effort is critical to ensuring compliance with federal cybersecurity requirements for defense contractors handling sensitive data, and must be fully realized across all systems and environments under the contract scope. The contractor must demonstrate adherence to all applicable controls, maintain documentation of implementation, and sustain continuous compliance through regular assessments and audits. This is a subcontract issued by the Department of Defense’s Active Devices Division, with performance expected to occur in New Cumberland, Pennsylvania, at zip code 17070-5002. The solicitation falls under NAICS code 541512 for computer systems design services and was posted on June 28, 2026, with responses due by July 9, 2026. All work must be completed in accordance with federal cybersecurity frameworks, and the successful bidder will be responsible for not only initial system alignment but also the long-term upkeep, monitoring, and reporting of security posture to maintain CMMC certification. Failure to comply will result in loss of eligibility to handle CUI and may trigger contract termination.