Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and self-assessment of CMMC Level 2 cybersecurity practices to safeguard covered defense information in alignment with NIST SP 800-171 and the DFARS clause 252.204-7012. This includes establishing, documenting, and maintaining a robust cybersecurity framework that meets the 110 security controls outlined in NIST SP 800-171, ensuring compliance through a formal self-assessment process documented in the Supplier Assessment Repository. The work must be performed in accordance with federal requirements for handling controlled unclassified information, with no third-party assessment required for CMMC Level 2 under this subcontract. This is a subcontract under the Department of Defense, issued by the Maritime Supply Chain ESOC Buys office, tied to the NAICS code 541512 for custom computer programming services. The response deadline is July 27, 2026, and performance is expected to occur at the FPO location with ZIP code 09532. The solicitation is open for submission through the DIBBS platform, and contractors must demonstrate capability to meet all CMMC Level 2 controls and maintain ongoing compliance throughout the contract lifecycle, including readiness for potential Department of Defense audits or validation efforts.