Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)

The contract requires the implementation and rigorous documentation of CMMC Level 2 and NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information. This includes conducting internal self-assessments to validate compliance with the specified frameworks, ensuring all required safeguards are properly integrated into systems and processes. The contractor must also establish and maintain robust procedures for cyber incident reporting in alignment with federal requirements, guaranteeing timely and accurate disclosure of any potential security breaches involving sensitive defense data. Performance is tied to a specific location in New Cumberland, Pennsylvania, with a focus on meeting all technical and administrative obligations under the Department of Defense’s cybersecurity mandates. The work is structured as a subcontract under NAICS code 541512, indicating it involves computer systems design services. The solicitation window closed on August 7, 2026, and the effort is directly linked to ASC Commodities Division, which manages defense logistics and supply chain operations requiring secure information handling. The contractor must deliver full compliance readiness, with documentation and audit trails available for inspection to demonstrate adherence to both CMMC Level 2 and NIST SP 800-171 standards.