Cybersecurity Compliance (CMMC Level 2) Implementation

The contract requires the implementation and documentation of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls to safeguard Controlled Unclassified Information (CUI) associated with design, calibration, and production data. This effort is focused on meeting the specific cybersecurity requirements mandated by the Department of Defense to ensure the protection of sensitive technical information throughout its lifecycle. The subcontractor must establish, maintain, and validate a suite of security practices and processes aligned with CMMC Level 2 standards, including access control, incident response, system and communications protection, configuration management, and audit and accountability measures. Performance of this work is tied to the NEW CUMBERLAND facility, with a zip code of 17070-5002, and is governed under the NAICS code 541512, indicating it relates to computer systems design services. The solicitation was posted on July 9, 2026, with a strict response deadline of July 20, 2026. All deliverables must be documented and submitted in accordance with federal cybersecurity compliance protocols, and the subcontractor is expected to demonstrate full adherence to CMMC Level 2 through evidence-based assessments and continuous monitoring. Although no set-aside type is specified, the work is designated as a subcontract under the Defense Logistics Agency’s procurement framework.