Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the performance of a CMMC Level 2 self-assessment to ensure full compliance with DFARS 252.204-7012 and the security requirements outlined in NIST SP 800-171 for the protection of controlled unclassified information. This effort is critical to meeting federal cybersecurity standards for safeguarding sensitive data handled under the Nuclear Reactor Program. The contractor must demonstrate implementation of all 110 security controls specified in NIST SP 800-171 and provide documented evidence of adherence through a formal self-assessment report aligned with CMMC Level 2 requirements. The work is scoped as a subcontract under the Department of Defense and is specifically targeted at the place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026, with the NAICS code 541512 indicating that the work falls under Custom Computer Programming Services. Although no set-aside designation is specified, the requirement is tied to a Defense Department agency and mandates strict adherence to cybersecurity protocols for handling CUI. All activities must be completed in time to satisfy federal compliance obligations prior to any operational deployment or data handling under the contract.