Export-Controlled Technical Data Compliance & CMMC Implementation

The contract requires support for compliance with ITAR and EAR regulations and implementation of CMMC Level 2 controls to properly handle controlled technical data associated with the design and production of a drill jig. This includes establishing and maintaining secure processes for the handling, storage, transmission, and disposal of sensitive information subject to U.S. export control laws, ensuring that all technical data remains protected from unauthorized access or disclosure. The contractor must demonstrate alignment with the NIST SP 800-171 security requirements as the foundation for CMMC Level 2 certification, including access control, audit and accountability, configuration management, identification and authentication, and incident response measures. The work is performed at a specified location in Jacksonville with a ZIP code of 28545-6070 and falls under NAICS code 541611 for management, scientific, and technical consulting services. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with a posting date of July 30, 2026, and a response deadline of August 7, 2026. Compliance with export control regulations is critical, as failure to meet these requirements could result in severe penalties and termination of contractual obligations. The contractor must have proven experience in applying CMMC Level 2 frameworks and managing controlled technical data within defense-related contexts, with a clear understanding of the implications of ITAR and EAR violations on national security.