Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of cybersecurity safeguards for systems that handle Controlled Unclassified Information, aligned strictly with the Cybersecurity Maturity Model Certification Level 2 requirements and the National Institute of Standards and Technology Special Publication 800-171. The work involves ensuring all technical, administrative, and physical controls specified under these standards are fully integrated, monitored, and audited to protect sensitive data from unauthorized access, disclosure, or compromise. Compliance must be maintained throughout the contract lifecycle with documented evidence of adherence to all 110 security controls outlined in NIST SP 800-171. This is a subcontract under the Department of Defense’s Land Supply Chain organization, classified under NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 22, 2026, with a response deadline of August 6, 2026. Performance is expected to occur across locations determined by the prime contractor, with no specific geographic restrictions indicated. The subcontractor must possess the capability to demonstrate CMMC Level 2 certification readiness, including policies, procedures, incident response, access controls, and continuous monitoring practices. All work must support the broader defense supply chain’s cybersecurity posture without reliance on external documentation or third-party validation beyond what is mandated by the contract terms.