Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

The contract requires the implementation and documentation of NIST SP 800-171 security controls to attain CMMC Level 2 compliance, focusing on the establishment of robust cybersecurity practices aligned with federal standards for protecting controlled unclassified information. This includes developing a Plan of Action and Milestones to address identified gaps, ensuring all security requirements are systematically tracked, mitigated, and formally documented. The contractor must also establish and maintain processes for timely cyber incident reporting in accordance with federal guidelines to ensure responsiveness and transparency in the event of a security breach. Performance of this contract is centered at New Cumberland, Pennsylvania, with a firm deadline for responses on July 21, 2026. It is structured as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, and falls under NAICS code 541512 for computer systems design services. The effort is geared toward ensuring the organization meets mandatory compliance thresholds necessary for handling sensitive defense information, requiring not only technical implementation but also thorough recordkeeping and continuous monitoring to sustain compliance post-implementation.