Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to meet the cybersecurity requirements for CMMC Level 2 certification, ensuring the protection of covered defense information throughout the duration of the agreement. This effort is critical for securing sensitive data processed, stored, or transmitted during contract performance and must be fully aligned with federal standards governing cybersecurity in the defense supply chain. The subcontractor is expected to establish, document, and sustain the necessary policies, procedures, and technical safeguards to achieve and maintain compliance with CMMC Level 2, including continuous monitoring and risk management practices. The work is tied to the NAICS code 541512 and will be performed at the specified location in New Cumberland with a zip code of 17070-5002. The contract was posted on July 29, 2026, with responses due by August 6, 2026, and falls under the purview of the Department of Defense’s ASC Commodities Division. The subcontractor must demonstrate the capability to meet these rigorous cybersecurity standards as a prerequisite for participation, and failure to achieve or maintain compliance could result in contract termination or loss of eligibility for future work. No specific set-aside classifications are indicated, but the requirement is narrowly focused on cybersecurity compliance within the defense context.