Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and ongoing maintenance of CMMC Level 2 cybersecurity controls for systems that handle Covered Defense Information, ensuring full alignment with the technical safeguards outlined in NIST SP 800-171 and the contractual requirements of DFARS 252.204-7012. This effort is focused on establishing a robust, auditable security posture that meets Department of Defense standards for protecting sensitive unclassified information within the supply chain, with all activities centered around a designated place of performance in New Cumberland, Pennsylvania, under a subcontract structure. The contract falls under NAICS code 541512, indicating it pertains to computer systems design and related services, and is managed by the ASC Commodities Division within the Department of Defense. The solicitation was posted on July 16, 2026, with responses due by July 24, 2026, allowing contractors a limited window to submit proposals. While no set-aside classification is specified, the work is expected to involve a comprehensive assessment of existing systems, documentation of security policies and procedures, implementation of technical and administrative controls, and continuous monitoring to maintain compliance. Successful performance will require proven expertise in CMMC Level 2 frameworks, experience with DoD contract compliance, and the ability to sustain controls through periodic audits and evolving threat landscapes.