Cybersecurity Compliance Support (NIST SP 800-171 & CMMC Level 2)

The contract requires comprehensive cybersecurity compliance support to ensure the prime contractor and all subcontractors adhere to NIST SP 800-171 controls and achieve CMMC Level 2 certification for the protection of Covered Defense Information. This includes implementing, documenting, and maintaining security controls related to access control, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The effort is centered on achieving and sustaining compliance across the entire supply chain to meet Department of Defense mandates for safeguarding sensitive unclassified information. Performance will be executed primarily at the specified place of performance in New Cumberland, Pennsylvania, with compliance activities extending to all relevant contractor sites and systems handling CDI. The work is classified as a subcontract under the NAICS code 541611, indicating management, scientific, and technical consulting services, and the solicitation is open for responses until May 20, 2026. The contracting activity falls under the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense, emphasizing the critical nature of aligning cybersecurity posture with national defense standards to prevent unauthorized access, disclosure, or compromise of defense-related data.