Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)

The contract requires implementation and maintenance of cybersecurity controls to protect covered defense information in alignment with CMMC Level 2 and NIST SP 800-171 standards, ensuring compliance through documented policies, procedures, and internal assessments. The work involves a full lifecycle of cybersecurity management including identifying vulnerabilities, applying corrective measures, conducting self-evaluations, and maintaining comprehensive records to demonstrate ongoing adherence to federal security requirements. The subcontract is tied to the NAICS code 541512 and is issued under the Department of Defense through MARITIME SUPPLY CHAIN, with performance obligated at a location in Columbus, Ohio, with a zip code of 43213. Proposals must be submitted by July 27, 2026, following a posting date of July 16, 2026, and all activities must be conducted under the framework of defense-related cybersecurity obligations, with no set-aside provisions specified.