Cybersecurity Compliance (CMMC Level 2)

The contract requires full implementation and self-assessment for CMMC Level 2 cybersecurity compliance to safeguard covered defense information in alignment with DFARS 252.204-7012 and NIST SP 800-171 standards. The work entails establishing and maintaining the necessary security controls, documentation, and processes to meet the mandatory cybersecurity requirements for handling sensitive defense data, with a focus on protecting controlled unclassified information. Compliance must be demonstrated through a thorough self-assessment process validating adherence to all applicable NIST 800-171 requirements, ensuring readiness for potential CMMC third-party assessments. The contract is classified as a subcontract under NAICS code 541512 and is issued by the Department of Defense through LAND SUPPLIER OPNS ENGINES, with performance specifically required at the location in New Cumberland, PA, 17070-5002. Responses to the solicitation must be submitted by August 3, 2026, and the opportunity is open to eligible subcontractors supporting defense-related cybersecurity obligations. Failure to meet the CMMC Level 2 standards will result in non-compliance and potential termination of contractual obligations, making accurate implementation and documentation critical to meeting project requirements.