Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and validation of CMMC Level 2 controls to safeguard Controlled Unclassified Information in alignment with NIST SP 800-171 and DFARS standards, ensuring robust cybersecurity practices are established across all relevant systems and processes. The work must be completed by a small business under a Total Small Business Set-Aside, with the North American Industry Classification System code 541512 indicating the focus on computer systems design and related services. The performance location is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the contracting activity is under the Department of Defense through the DDSP New Cumberland Facility. All proposals must be submitted by the response deadline of August 10, 2026, following the solicitation posted on July 29, 2026. The contract is structured as a subcontract, meaning the winning party will be providing cybersecurity services to another contractor or prime entity under the Department of Defense. Compliance with all CMMC Level 2 requirements is mandatory, encompassing technical, administrative, and physical safeguards to protect CUI, with validation confirming full adherence to the framework. The effort is critical to maintaining the security posture of defense-related information systems and supports the broader DoD objective of securing the defense industrial base against evolving cyber threats.