Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and documentation of CMMC Level 2 cybersecurity controls to safeguard Controlled Unclassified Information in compliance with NIST SP 800-171 and DFARS regulations. This effort is focused on establishing a robust cybersecurity framework that meets federal standards for protecting sensitive data within subcontracted operations. The work must be completed in accordance with prescribed guidelines, ensuring all technical, administrative, and physical safeguards are properly documented and verified. The contract is classified as a subcontract under the NAICS code 541512 and is managed by the ASC COMMODITIES DIVISION under the Department of Defense. Performance is to take place at a location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 24, 2026. While no set-aside type or point of contact is specified, the requirement is clearly defined around achieving and documenting CMMC Level 2 compliance, which is critical for maintaining eligibility to handle CUI in defense-related supply chain activities.