Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and documentation of CMMC Level 2 controls for systems that handle Controlled Unclassified Information, ensuring compliance with cybersecurity requirements for access controls, incident reporting, and self-assessment processes. This effort is focused on establishing and validating technical and operational safeguards necessary to protect CUI in accordance with the Department of Defense’s Cybersecurity Maturity Model Certification framework. The work is tied to a subcontract under the Maritime Supply Chain organization, with performance expected to occur in New Cumberland, Pennsylvania, at the specified ZIP code. All deliverables must be thoroughly documented and aligned with CMMC Level 2 standards to demonstrate auditable compliance. The solicitation was posted on July 23, 2026, with a response deadline of August 3, 2026, indicating a narrow window for proposal submission. The North American Industry Classification System code 541512 identifies the work as related to computer systems design services, suggesting the contractor will provide specialized cybersecurity implementation expertise. This contract does not specify a set-aside type and is explicitly listed as a subcontract, meaning the offering organization is expected to fulfill this requirement as part of a larger prime contract structure. Interested parties must review the full details via the provided DIBBS link to ensure alignment with all technical, administrative, and compliance obligations.