Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance (CMMC Level 2)

Active

Federal

Response Deadline08/20/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across all systems handling Controlled Unclassified Information (CUI). This includes establishing technical and administrative safeguards aligned with CMMC requirements to protect the confidentiality, integrity, and availability of CUI, as well as preparing for and undergoing a third-party assessment to validate compliance. The work is expected to be performed at the New Cumberland facility with a zip code of 17070-5002, and the contractor must ensure all cybersecurity practices are continuously monitored, documented, and updated to remain in compliance throughout the contract term. The acquisition is classified as a subcontract under NAICS code 541512, and the contracting activity is managed by the Department of Defense through the DDSP New Cumberland Facility. All proposals must be submitted by the deadline of August 20, 2026, with no set-aside provisions specified for small business or other socioeconomic categories.

General Info

Implement and maintain CMMC Level 2 controls for CUI at New Cumberland, with third-party assessment required by August 20, 2026.

Agency

Department Of Defense → DDSP NEW CUMBERLAND FACILITYView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

NEW CUMBERLAND, PA, 17070-5002, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 9

subcontract

Response DeadlineAug 20

Submission deadline

Response Deadline

08/20/2026, 05:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → DDSP NEW CUMBERLAND FACILITY

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → DDSP NEW CUMBERLAND FACILITY

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implement and maintain CMMC Level 2 cybersecurity controls for systems handling Controlled Unclassified Information (CUI), including third-party assessment.

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 5 hours ago

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

LAND SUPPLY CHAIN

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

JACKSONVILLE BLDG

POSTED

about 5 hours ago

DEADLINE

CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.

ACTIVE DEVICES DIVISION

POSTED

about 5 hours ago

DEADLINE

Cybersecurity and CUI SafeguardingThe contract entails the implementation and ongoing maintenance of comprehensive cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for systems handling controlled unclassified information. The work is focused on safeguarding CUI within the operational environment at Robins Air Force Base, Georgia, under the Department of Defense’s Warner Robins organization. The contractor must establish, validate, and sustain a robust security posture that aligns with federal requirements, addressing technical, administrative, and physical controls necessary to protect sensitive data from unauthorized access, disclosure, or compromise. This is a subcontract opportunity with a NAICS code of 541512, indicating it pertains to computer systems design services. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, providing a tight window for qualified entities to submit proposals. Performance must be executed at the specified location in Robins AFB, and the contractor is expected to demonstrate proven experience in delivering CMMC and NIST compliance solutions, including documentation, auditing, and continuous monitoring capabilities. The absence of a set-aside designation means the opportunity is open to all eligible small and large businesses, with evaluation likely centered on technical capability, past performance, and compliance readiness.

POSTED

about 5 hours ago

DEADLINE

Cybersecurity & Controlled Unclassified Information (CUI) SafeguardingThe contract requires the implementation of NIST Special Publication 800-171 controls to protect covered defense information and ensure compliance with DFARS 252.204-7012, mandating robust cybersecurity measures for safeguarding controlled unclassified information. This includes establishing and maintaining security controls across systems handling such data, as well as defining clear procedures for detecting, reporting, and responding to cyber incidents in accordance with federal requirements. The effort is scoped as a subcontract under the Department of Defense, with performance expected at Tinker Air Force Base, Oklahoma, 73145-8000. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, under NAICS code 541512, which pertains to computer systems design services. The work supports the broader DoD objective of securing sensitive information across the defense industrial base and requires full alignment with NIST 800-171 standards, covering areas such as access control, audit, configuration management, and incident response. Failure to implement and maintain these controls could result in noncompliance penalties and jeopardize contract execution.

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance & Incident Reporting (NIST SP 800-171)The contract requires support to a prime contractor in achieving and maintaining compliance with NIST SP 800-171 cybersecurity controls, ensuring that all required safeguards are properly implemented across systems handling controlled unclassified information. A critical obligation is the timely reporting of any cyber incidents to the Department of Defense within a strict 72-hour window as mandated by DFARS clauses, emphasizing rapid detection, response, and documentation of potential security breaches. The work will be performed at Robins Air Force Base with a zip code of 31098-1626, and the subcontract falls under NAICS code 541512 for computer systems design services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, with the contracting organization identified as the Active Devices Division under the Department of Defense.

ACTIVE DEVICES DIVISION

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

ASC COMMODITIES DIVISION

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance & CUI SafeguardingThe contract requires implementation and maintenance of cybersecurity controls to ensure full compliance with DFARS 252.204-7012 and NIST SP 800-171 standards, specifically to safeguard Controlled Unclassified Information (CUI) on systems supporting the prime contractor. All subcontractor systems handling CUI must meet these federal requirements, including robust access controls, audit logging, media protection, incident response, and regular system assessments to prevent unauthorized access or data loss. Compliance is mandatory and ongoing throughout the contract lifecycle, with continuous monitoring and documentation to demonstrate adherence. This subcontract is issued under the NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Aviation Supply Chain ESOC Buys office. The place of performance is designated as FPO, 96632, indicating operations may occur in deployed or overseas contexts. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026. Bidders must demonstrate proven ability to meet CUI protection requirements, maintain secure systems, and provide evidence of compliance readiness, as failure to meet these standards may result in contract termination or loss of eligibility for future DoD work.

AVIATION SUPPLY CHAIN ESOC BUYS

POSTED

about 5 hours ago

DEADLINE

Cybersecurity & Information Safeguarding (NIST SP 800-171)This contract requires the implementation of NIST SP 800-171 controls to ensure the protection of contract information during access or transmission, focusing on safeguarding sensitive data associated with the work. The effort is scoped as a subcontract under a Women-Owned Small Business Set-Aside, with a NAICS code of 541512 indicating it pertains to custom computer programming services. The solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026, and the place of performance is designated as Tracy, California, with a zip code of 95304-5000. The awarding agency is the DLA Dist San Joaquin under the Department of Defense, and the obligation centers on meeting federal cybersecurity standards to maintain the confidentiality, integrity, and availability of information handled under the agreement.

DLA DIST SAN JOAQUIN

POSTED

about 5 hours ago

DEADLINE

Cybersecurity Compliance (NIST SP 800-171) ImplementationThe contract requires the implementation and documentation of cybersecurity safeguards mandated by NIST Special Publication 800-171 to protect Controlled Unclassified Information in alignment with Defense Federal Acquisition Regulation Supplement requirements. The work involves deploying technical, administrative, and physical controls to ensure compliance across all systems handling such information, with full documentation to demonstrate adherence to each of the 110 security requirements outlined in the NIST framework. Execution must be completed within the specified performance timeline and verified through auditable records, ensuring readiness for government assessment. This subcontract is issued under the Department of Defense’s Defense Logistics Agency with a NAICS code of 541512, indicating it falls under Computer Systems Design and Related Services. The place of performance is listed as FPO with a ZIP code of 96322-0001, suggesting operations may occur in a deployed or mobile military environment. The solicitation opened on August 9, 2026, and responses are due by August 20, 2026, with all work tied to meeting stringent federal cybersecurity standards for defense contractors handling sensitive but unclassified data.

Defense Logistics Agency

POSTED

about 5 hours ago

DEADLINE

More opportunities from Department Of Defense → DDSP NEW CUMBERLAND FACILITY

Same awarding agency

Hazardous Materials Compliance & Labeling

Other Scientific and Technical Consulting Services

POSTED

about 5 hours ago

DEADLINE

Precision Cutting and Kitting Services

Fabricated Structural Metal Manufacturing

POSTED

about 5 hours ago

DEADLINE

Cold-Finished Steel Flat Bar Supply

Iron and Steel Mills and Ferroalloy Manufacturing

POSTED

about 5 hours ago

DEADLINE

Rubber Seals and Gaskets SupplyThe contract is for the supply of nonmetallic special-shaped rubber sections intended for defense or industrial applications, requiring full manufacturing capabilities along with proper packaging and FOB Origin shipping in strict compliance with military specifications. The components, described as rubber seals and gaskets, must be produced to exacting standards to ensure performance in demanding operational environments. The work is subcontracted under NAICS code 326220, which classifies rubber product manufacturing, and is managed by the Department of Defense through its DDSP New Cumberland Facility, with performance required at the 17070-5002 location in New Cumberland. All deliveries must meet defined military criteria and be shipped from the manufacturer’s facility, placing responsibility for logistics and quality control squarely on the contractor. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, and is part of a broader procurement effort to support critical defense and industrial infrastructure needs.

Rubber and Plastics Hoses and Belting Manufacturing

POSTED

about 5 hours ago

DEADLINE

Packaging, Marking, and Bar-Coding ServicesThe contract requires the provision of packaging, preservation, labeling, and bar-coding services for butterfly valves in full compliance with MIL-STD-2073-1E and MIL-STD-129 standards, including adherence to hazard communication requirements. All materials must be properly preserved to prevent damage during storage and transit, labeled according to military specifications, and barcoded for accurate tracking and inventory management throughout the supply chain. The work must be executed to meet the rigorous defense logistics protocols governing the handling and identification of military-grade components. This subcontract is issued by the Department of Defense through the DDS New Cumberland Facility, with performance required at the location in New Cumberland, Pennsylvania, zip code 17070-5002. Responses are due by August 20, 2026, and the North American Industry Classification System code applicable to this solicitation is 493190, indicating it falls under other warehousing and storage services. The contract involves precise execution of defense logistics standards to ensure full operational readiness and traceability of butterfly valves within the military supply system.

Other Warehousing and Storage

POSTED

about 5 hours ago

DEADLINE

First Article Testing (FAT) ServicesThe contract requires the performance and documentation of First Article Testing for butterfly valves, encompassing dimensional, material, and functional testing to ensure compliance with specified requirements. The successful bidder must deliver a detailed test report documenting all results, confirming that the valves meet all applicable standards and specifications before proceeding with full production. Testing must be conducted according to established protocols, with complete traceability and rigorous documentation to support validation. The solicitation is classified as a subcontract under NAICS code 541380 and is issued by the Department of Defense through the DDSP NEW CUMBERLAND FACILITY, with performance required at a location in NEW CUMBERLAND, Pennsylvania, with zip code 17070-5002. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. All submissions must be completed through the designated DIBBS platform prior to the deadline to be considered for award.

Testing Laboratories and Services

POSTED

about 5 hours ago

DEADLINE

Butterfly Valve Manufacturing and SupplyThe contract involves the manufacture and delivery of 23 butterfly valves to meet strict military standards, encompassing full production, rigorous quality control, proper packaging, and precise marking requirements. All work must adhere to the technical and compliance specifications mandated by the Department of Defense, ensuring the valves are suitable for defense applications. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002, indicating where final delivery and acceptance will occur. The solicitation falls under the NAICS code 332911, classifying it as other fabricated metal product manufacturing, and is structured as a subcontract opportunity. The response deadline is August 20, 2026, with the solicitation posted on August 9, 2026, providing a 11-day window for potential vendors to submit proposals. The contracting activity is conducted through the DDSP New Cumberland Facility, a U.S. Department of Defense entity responsible for managing defense-related procurement logistics.

Industrial Valve Manufacturing

POSTED

about 5 hours ago

DEADLINE

Solenoid Valve Supply and DeliveryThe contract pertains to the supply, packaging, and delivery of a solenoid valve with National Stock Number 4810009927036, manufactured to meet stringent military specifications for integration into critical defense systems. The item must be delivered in full compliance with required performance, durability, and environmental standards appropriate for military applications, with packaging protocols ensuring integrity during transit and storage under demanding conditions. The contract is issued as a subcontract under the Department of Defense, specifically through the DDSP NEW CUMBERLAND FACILITY, with performance obligated at the New Cumberland location, zip code 17070-5002. The solicitation, classified under NAICS code 332912 for other fabricated metal product manufacturing, was posted on August 9, 2026, and responses are due by August 20, 2026. All offerings must be submitted through the DIBBS platform to be considered, and contractors are expected to adhere to defense procurement protocols without any set-aside provisions specified for small business or other socioeconomic categories.

Fluid Power Valve and Hose Fitting Manufacturing

POSTED

about 5 hours ago

DEADLINE

Quality Assurance & Inspection SupportThe contract requires the performance of pre-shipment quality inspections to verify that products meet the stringent standards outlined in the DLA Master List, ASTM D3951, and MIL-STD-129 for marking and packaging compliance. These inspections are critical to ensuring that all items intended for military use are properly labeled, packaged, and documented in accordance with Department of Defense requirements. The work must be performed in alignment with established defense logistics protocols to guarantee readiness and reduce the risk of non-compliant shipments entering the supply chain. This subcontract is issued by the DDSP NEW CUMBERLAND FACILITY under the Department of Defense, with performance centered at the New Cumberland location, zip code 17070-5002. The solicitation falls under NAICS code 541330, indicating it is related to professional, scientific, and technical services, specifically in the area of quality assurance and inspection support. Proposals must be submitted by the response deadline of August 20, 2026, following the posting date of August 9, 2026. All potential offerors should be prepared to demonstrate capability in executing precise, repeatable quality control processes under federal defense standards, with an emphasis on traceability, accuracy, and adherence to military specification requirements.

Engineering Services

POSTED

about 5 hours ago

DEADLINE

Transportation & Shipping of Regulated MaterialsThe contract entails the transportation and delivery of non-wood timber materials, including hazardous substances, to Department of Defense destinations within 35 days after contract award, strictly adhering to Defense Logistics Agency and DoD shipping regulations. All shipments must comply with federal standards for handling, labeling, and transporting regulated and hazardous materials, ensuring safety, traceability, and full documentation throughout the supply chain. The performance location is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the work falls under NAICS code 484220 for general freight trucking. This is a subcontract awarded by the DDSP New Cumberland Facility under the Department of Defense, with a response deadline of August 20, 2026, and a posted date of August 9, 2026. Bidders must be prepared to meet stringent compliance requirements for hazardous material transport, demonstrate proven capability in military logistics, and ensure on-time delivery within the 35-day window. The solicitation is accessible via the DIBBS platform and does not specify a set-aside status, meaning eligible contractors of any size may respond provided they meet all technical and regulatory stipulations.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

about 5 hours ago

DEADLINE

Hazardous Materials Compliance & Labeling ServicesThe contract involves the preparation and submission of hazard warning labels and Safety Data Sheets for hazardous materials that are not regulated under FIFRA or FDA, ensuring full compliance with OSHA standards and DFARS requirements. This work is critical for maintaining safety and regulatory adherence in environments where chemical handling and storage are subject to federal workplace safety mandates. The services required include accurate classification, labeling, and documentation of hazardous substances to support safe transport, handling, and use by personnel across Department of Defense operations. The contract is classified as a subcontract under NAICS code 541690, and it is associated with the DDSP NEW CUMBERLAND FACILITY under the Department of Defense. Performance is required at the location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on August 9, 2026, and responses must be submitted by August 20, 2026. While no specific set-aside designation or point of contact is provided, the urgency and specificity of the compliance requirements necessitate a contractor with demonstrated expertise in hazardous materials documentation, OSHA labeling protocols, and defense acquisition regulations.

Other Scientific and Technical Consulting Services

POSTED

about 5 hours ago

DEADLINE

Non-Wood Timber/Lumber SupplyThe contract requires the supply of 800 units of non-wood timber/lumber identified by NSN 5675015914344, with strict adherence to DLA packaging, marking, and hazardous material labeling standards to ensure compliance with military logistics protocols. This subcontract is issued by the DDSP NEW CUMBERLAND FACILITY under the Department of Defense, with performance required at the location in NEW CUMBERLAND, PA, zip code 17070-5002. The solicitation was posted on August 9, 2026, and responses must be submitted by August 20, 2026. The NAICS code 321999 indicates this falls under other wood product manufacture, though the product itself is non-wood, suggesting a specialized industrial classification. All deliveries must meet the defined DLA specifications without exception to maintain supply chain integrity and safety standards.

All Other Miscellaneous Wood Product Manufacturing

POSTED

about 5 hours ago

DEADLINE