Cybersecurity Compliance (CMMC Level 2 Assessment)

The contract requires the performance of a CMMC Level 2 assessment for systems that handle controlled technical data associated with turnbuckle bodies, with the explicit goal of verifying compliance with NIST SP 800-171 and DFARS 252.204-7012. This assessment must evaluate the implementation of security controls to protect sensitive defense-related information, ensuring that the contractor’s cybersecurity posture meets the stringent requirements set forth by the Department of Defense for safeguarding controlled unclassified information. The work is scoped to focus specifically on systems involved in the production or support of turnbuckle bodies, necessitating a detailed review of access controls, audit capabilities, data encryption, and incident response procedures. The contract is issued as a subcontract under the Department of Defense's Land Supply Chain initiative, with the place of performance located in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, indicating a narrow window for qualification and submission. The North American Industry Classification System code 541512 applies, identifying this as a requirement for computer systems design services, underscoring the technical expertise needed to conduct the assessment. The work is part of a broader Defense Industrial Base cybersecurity initiative, and successful performance will validate the contractor's ability to support defense supply chain integrity through validated cybersecurity maturity at CMMC Level 2.