Cybersecurity Compliance (CMMC Level 2 Assessment)

The contract requires the performance of a CMMC Level 2 assessment on prime contractor systems to verify compliance with DFARS 252.204-7012 and NIST SP 800-171 standards for protecting Covered Defense Information. The assessment must evaluate the adequacy of security controls implemented to safeguard sensitive government data within the contractor’s information systems, ensuring alignment with federal cybersecurity requirements for defense contracting. Failure to meet these standards could result in non-compliance and potential loss of contract eligibility. The work is to be performed in New Cumberland, Pennsylvania, under a subcontract arrangement, with a response deadline of July 27, 2026, and a posted date of July 16, 2026. The NAICS code 541512 identifies the scope as computer systems design and related services, indicating the need for specialized cybersecurity expertise. The contract is managed by the Department of Defense through its Land Supply Chain organization, and the performance location is designated as a secure defense supply chain hub. All activities must be completed in strict accordance with CMMC framework guidelines to validate the contractor’s ability to handle controlled unclassified information securely.