Export Control & Cybersecurity Compliance (CMMC Level 2)

The contract requires implementation and maintenance of CMMC Level 2 cybersecurity controls to safeguard controlled unclassified information and ensure compliance with DFARS 252.204-7012, ITAR, and EAR regulations. The scope centers on establishing a robust cybersecurity framework that meets the Department of Defense’s standards for protecting sensitive data throughout its lifecycle, with emphasis on access controls, incident response, media protection, and system monitoring. The subcontractor must demonstrate the ability to sustain these controls continuously and provide documentation to validate ongoing compliance. This subcontract is issued under the NAICS code 541512 for computer systems design services and is managed by the Fluid Handling Division of the Department of Defense. The solicitation was posted on July 15, 2026, with a response deadline of July 21, 2026. Performance is expected to occur at an unspecified location, and the contract falls under a general subcontracting category without a specific set-aside designation. All proposed solutions must align with federal export control and cybersecurity mandates, ensuring that systems handling CUI are not only secured but also auditable and aligned with defense industrial base requirements.