Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 and CMMC Level 2 standards for systems that handle covered defense information. All security measures must be fully operational to protect sensitive data from unauthorized access, disclosure, or compromise, with continuous compliance expected throughout the duration of the agreement. Contractors must establish and document robust processes for monitoring, detecting, and responding to cybersecurity threats, ensuring that all systems remain in full alignment with federal requirements. In the event of a cybersecurity incident, immediate reporting is mandatory within 72 hours of discovery, with detailed documentation of the nature, scope, and impact of the breach. The work is to be performed at the specified location in Jacksonville, Florida, and the contract is structured as a subcontract under the Department of Defense, with a NAICS code of 541512 for computer systems design services. Proposals must be submitted by the deadline of July 16, 2026, and all responders are expected to demonstrate proven capability in meeting these stringent cybersecurity obligations under a defense contracting environment.