Export-Controlled Technical Data Handling and Cybersecurity Compliance

The contract requires the secure handling of technical data subject to International Traffic in Arms Regulations and Export Administration Regulations, ensuring strict compliance with U.S. export control laws throughout all phases of performance. It mandates the implementation of Cybersecurity Maturity Model Certification Level 2 requirements to protect controlled unclassified information and maintain the integrity of sensitive defense-related systems and data. All work must be performed at Robins Air Force Base, Georgia, with stringent controls on data access, storage, transmission, and disposal to prevent unauthorized disclosure or transfer. The subcontractor must demonstrate existing or immediate capacity to meet CMMC Level 2 standards, including comprehensive cybersecurity policies, employee training, system hardening, and continuous monitoring protocols aligned with NIST SP 800-171. The submission window for proposals closes on August 3, 2026, and all responses must fully address the technical and compliance obligations outlined in the solicitation. The contracting activity falls under the Department of Defense’s Fluid Handling Division, with the NAICS code 541611 indicating the work involves administrative management and general management consulting services supporting defense-related IT and cybersecurity infrastructure. While no set-aside designation is specified, potential offerors must be prepared to provide documentation verifying their eligibility to handle ITAR/EAR-controlled information and their ability to achieve and sustain CMMC Level 2 certification during contract performance. The requirement emphasizes operational readiness, regulatory adherence, and the protection of national security technology from adversarial exploitation.