Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard controlled unclassified information within covered contractor information systems. It further demands full support for Cybersecurity Maturity Model Certification Level 2 compliance, ensuring the contractor meets the required practices and processes across all seventeen security domains. The contractor must also establish and sustain a robust cyber incident reporting framework, enabling timely detection, response, and disclosure of security events to the appropriate government authorities in accordance with federal requirements. This is a subcontract under a Total Small Business Set-Aside, exclusively available to small businesses as defined by the SBA, with the NAICS code 541512 indicating it pertains to custom computer programming services. The performance location is designated as New Cumberland, Pennsylvania, 17070-5002, and the acquiring agency is the Department of Defense through its Land Supply Chain office. The solicitation was posted on July 20, 2026, with a response deadline of July 23, 2026, indicating a narrow window for proposal submission. All work must be executed to meet stringent federal cybersecurity standards with full accountability for compliance, documentation, and incident transparency.