Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract calls for the implementation of cybersecurity controls to achieve CMMC Level 2 compliance and ensure adherence to NIST SP 800-171 standards for systems processing Controlled Unclassified Information. The work is required to safeguard CUI by establishing, documenting, and operationalizing the 110 security controls outlined in NIST SP 800-171, including access control, incident response, audit and accountability, and system and communication protection measures. The contractor must demonstrate a fully functional and auditable cybersecurity posture capable of passing a third-party CMMC assessment, with all controls integrated into existing IT infrastructure and workflows. This subcontract is issued under NAICS code 541512 and is tied to the Department of Defense’s Aviation Supply Chain initiative, with performance required at a designated location in New Cumberland, Pennsylvania, zip code 17070-5002. Proposals are due by July 23, 2026, with the solicitation posted on July 15, 2026 through the DIBBS system. The effort demands thorough documentation of policies, procedures, and technical configurations, along with ongoing monitoring and continuous improvement to maintain compliance. All activities must align with federal mandates for protecting sensitive defense information and supporting the broader goals of securing the defense industrial base.