Cybersecurity Compliance (NIST SP 800-171 and CMMC Level 2)

The contract requires the implementation and documentation of NIST SP 800-171 security controls for systems that handle Controlled Unclassified Information, with the goal of achieving CMMC Level 2 certification. This effort involves aligning the organization’s cybersecurity practices with federal standards to ensure robust protection of sensitive data, including conducting gap assessments, deploying technical and administrative safeguards, and maintaining comprehensive documentation to demonstrate compliance. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with all deliverables adhering to the timelines and requirements specified in the subcontract. The solicitation is designated as a Women-Owned Small Business Set-Aside under NAICS code 541611, which pertains to Administrative Management and General Management Consulting Services, and is issued by the Department of Defense under the organization name LAND SUPPLIER OPNS VEHICLE SPT. The response deadline is August 3, 2026, and the contract is not tied to a specific solicitation number, indicating it may be issued under an existing vehicle or blanket order. The successful contractor is expected to provide not only technical implementation but also ongoing support and audit readiness to sustain CMMC Level 2 compliance throughout the contract lifecycle.