Cybersecurity Compliance (CMMC/NIST SP 800-171)

The contract requires the performance of a CMMC Level 2 self-assessment to ensure full compliance with NIST SP 800-171 standards for protecting Controlled Unclassified Information within contractor systems. This effort is essential for meeting Department of Defense cybersecurity requirements, specifically targeting the implementation of security controls designed to safeguard CUI across all applicable systems and environments. The work must be completed in alignment with the CMMC framework’s Level 2 maturity criteria, which includes documenting policies, conducting internal assessments, and validating that technical and procedural safeguards are effectively deployed and maintained. The solicitation is issued as a subcontract under the NAICS code 541512 for Computer Systems Design Services and is managed by the Maritime Supply Chain office within the Department of Defense. The place of performance is designated as Coraopolis, Pennsylvania, with a zip code of 15108-4487. The response deadline is August 3, 2026, and the solicitation was posted on July 23, 2026, indicating a limited window for interested parties to submit proposals. Participation requires a thorough understanding of federal cybersecurity regulations and the ability to deliver a credible, documented self-assessment that meets CMMC and NIST compliance thresholds without third-party validation at this stage.