Cybersecurity Compliance (CMMC Level 2) Implementation

The contract encompasses the implementation and ongoing maintenance of cybersecurity controls necessary to achieve and sustain compliance with CMMC Level 2 standards, specifically to safeguard Controlled Unclassified Information. This effort is being conducted as a subcontract under the Department of Defense’s Maritime Supply Chain program, with performance centered in New Cumberland, Pennsylvania, at the designated zip code 17070-5002. The work requires full alignment with NIST SP 800-171 controls and the associated CMMC framework, ensuring that all technical, procedural, and administrative safeguards are properly established, documented, and continuously monitored to protect CUI from unauthorized access, disclosure, or compromise. The solicitation, posted on July 23, 2026, requires proposals to be submitted by August 3, 2026, and falls under NAICS code 541512 for Custom Computer Programming Services. As a subcontract, the entity responding must be prepared to integrate securely with the prime contractor’s existing cybersecurity infrastructure and compliance processes. The successful bidder will be responsible not only for initial implementation but also for sustaining compliance through regular audits, vulnerability management, employee training, and documentation updates. All activities must be conducted in accordance with federal cybersecurity guidelines, with emphasis on readiness for third-party assessments under the CMMC program, and the ability to provide auditable evidence of full adherence to the required controls at all times.