Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and self-assessment of CMMC Level 2 cybersecurity controls to protect covered defense information in alignment with NIST SP 800-171 and DFARS requirements. The work involves achieving full compliance with the specified security standards through a structured approach that includes configuring systems, documenting policies, conducting internal audits, and preparing for third-party assessment readiness. The effort must be completed within the submission window, with a response deadline of July 27, 2026, and is classified as a subcontract under the NAICS code 541512 for computer systems design services. Performance is to be conducted at the facility located in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and is managed under the Department of Defense through LSO Combat Vehicles and Armament. Though no specific point of contact or set-aside type is indicated, the obligation is tied directly to securing sensitive defense information and ensuring ongoing compliance with federal cybersecurity mandates. The contract’s success hinges on thorough documentation, accurate self-assessment scoring, and readiness for verification by authorized assessors to maintain eligibility for future defense work.