Supply Chain Cybersecurity and CMMC Compliance

This contract requires comprehensive support for CMMC Level 2 and NIST SP 800-171 compliance across the prime and all subcontractors within the supply chain, ensuring adherence to DFARS 252.204-7012 requirements for safeguarding controlled unclassified information. The scope includes conducting formal assessments, developing and maintaining documented security controls, implementing incident reporting protocols, and ensuring continuous compliance readiness throughout the contract lifecycle. All parties must align with the specified cybersecurity framework and maintain documentation that demonstrates full implementation of required safeguards. The solicitation is designated as a Total Small Business Set-Aside under SBA guidelines, restricting participation to small business concerns as defined by the NAICS code 541512 for computer systems design services. Performance is centered in Bremerton, Washington, with a response deadline of August 24, 2026, and the posting date was August 10, 2026. The contracting activity falls under the Department of Defense's Land Supply Chain office, emphasizing the critical need for secure and compliant subcontractor operations to protect sensitive defense-related information throughout the supply chain.