CMMC Level 2 and NIST SP 800-171 Cybersecurity Compliance

The contract requires comprehensive support to achieve CMMC Level 2 certification and full implementation of NIST SP 800-171 cybersecurity controls, ensuring alignment with DFARS cybersecurity requirements. This includes conducting a detailed system assessment to identify gaps, developing and organizing all necessary documentation, and executing a robust compliance program to meet the mandated security standards for handling controlled unclassified information. The effort involves both technical implementation and procedural adherence across the organization’s information systems. This subcontract is scoped for performance at Tracy, California, with a zip code of 95304-5000, and is governed under NAICS code 541512 for computer systems design services. The offering was posted on August 9, 2026, with responses due by August 17, 2026, and is managed by the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense. The work is critical to maintaining the defense supply chain’s cybersecurity posture and must be completed in full compliance with federal cybersecurity mandates before the stated deadline.