Supply Chain Compliance and CUI Safeguarding (Cybersecurity)

The contract requires full implementation and ongoing maintenance of CMMC Level 2 compliance to safeguard Covered Defense Information, with specific focus on developing and sustaining a System Security Plan and adherence to all NIST SP 800-171 security controls. It mandates strict enforcement of DFARS 252.204-7012 requirements to ensure the protection of Controlled Unclassified Information throughout the supply chain. All cybersecurity measures must be documented, operational, and continuously monitored to meet federal defense standards, with accountability for both technical implementation and policy compliance. The obligation extends to maintaining audit readiness and responding to evolving threats without compromising the integrity of sensitive data. This is a subcontract under the Department of Defense, categorized under NAICS code 541512, and is tied to the construction and equipment manufacturing sector. The proposal must be submitted by August 19, 2026, following an open solicitation with no set-aside restrictions. Performance is expected to support DoD supply chain security initiatives, and while no specific location is listed, compliance must be achievable regardless of operational site. All activities center on establishing a robust, verifiable cybersecurity posture that aligns with DoD expectations for contractors handling classified and sensitive unclassified information.