Cybersecurity Compliance (CMMC Level 2)

The contract requires the contractor to perform a self-assessment and maintain Compliance with the Cybersecurity Maturity Model Certification Level 2 standards for all systems handling covered defense information, as mandated under RD004. This obligation is central to ensuring that cybersecurity controls are properly implemented and sustained to protect sensitive data associated with Department of Defense operations. The work must be conducted in accordance with federal cybersecurity requirements and the contractor is responsible for ongoing monitoring, documentation, and readiness for potential audits or evaluations to verify continued adherence to CMMC Level 2 criteria. The contract is categorized as a subcontract under NAICS code 541512 and is issued by the ASC Commodities Division of the Department of Defense. Performance is expected to occur at New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 24, 2026. There is no set-aside designation applied, and the contract does not include specific point of contact details. All efforts must align with the federal cybersecurity framework and ensure uninterrupted compliance throughout the duration of the agreement.