Supplier of CMMC-Compliant IT Components or Systems

The contract seeks suppliers to provide commercial off-the-shelf or custom IT equipment including servers, encrypted storage devices, and network hardware that meet CMMC Level 2 and NIST SP 800-171 compliance requirements. All delivered systems must be accompanied by comprehensive secure configuration documentation to verify adherence to federal cybersecurity standards for protecting controlled unclassified information. The equipment must be suitable for deployment in a secure government environment and fully support the security controls mandated by these frameworks. This is a subcontract opportunity issued by the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION, with a place of performance located in New Cumberland, Pennsylvania, 17070-5002. The solicitation is open for responses until May 18, 2026, and the NAICS code 423430 indicates the primary focus is on computer and computer peripheral equipment and supplies merchant wholesalers. There is no set-aside designation, and all qualified suppliers may respond, provided they can demonstrate full compliance with the specified cybersecurity mandates and documentation requirements.