Cybersecurity Compliance (CMMC Level 2)

The contract requires implementation and self-assessment for Cybersecurity Maturity Model Certification (CMMC) Level 2 to ensure the protection of controlled unclassified information (CUI) within the maritime supply chain. This subcontract is issued under the Department of Defense and falls under NAICS code 541512, indicating it pertains to computer systems design and related services. The contractor must fully align with CMMC Level 2 requirements, which include implementing a baseline of security practices and processes designed to safeguard CUI from common cyber threats. Self-assessment documentation must be prepared and maintained to demonstrate compliance with all applicable controls, and the organization must be prepared for potential third-party validation as part of the CMMC framework. The solicitation was posted on July 19, 2026, with a strict response deadline of July 30, 2026, requiring prompt action from potential offerors. The performance location and point of contact are not specified, but the work is integral to supporting Department of Defense supply chain operations. Compliance with CMMC Level 2 is mandatory, and failure to meet the required security controls could result in disqualification or contract termination. The contractor is expected to have the technical capacity to deploy, manage, and document security controls across systems and networks handling CUI, with an emphasis on continuous improvement and readiness for assessment.