Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

The contract requires implementation of NIST SP 800-171 security controls to safeguard controlled unclassified information in alignment with DFARS requirements, ensuring that all systems and processes handling CUI meet federal cybersecurity standards. This includes configuring technical, administrative, and physical safeguards across the organization’s infrastructure and operational procedures to fully comply with the 110 controls outlined in NIST SP 800-171, with documentation and evidence prepared to demonstrate adherence. The effort also encompasses supporting a self-assessment for CMMC Level 2 certification, which demands a robust cyber maturity posture, including policies, training, access controls, audit logging, and incident response capabilities validated through internal reviews and readiness activities. The subcontract is issued under the Department of Defense’s Aviation Supply Chain initiative, with performance tied to a specific location in New Cumberland, PA, zip code 17070-5002. The NAICS code 541512 indicates the work falls under computer systems design services, emphasizing the technical and consultative nature of the compliance effort. The solicitation was posted on July 14, 2026, and responses must be submitted by July 22, 2026, with no set-aside provisions applied. The work is critical for enabling the prime contractor to maintain eligibility for DoD contracts involving CUI, requiring a disciplined, audit-ready approach to cybersecurity governance and documentation.