CMMC Level 2 Compliance and Cybersecurity Support

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls for systems that handle covered defense information, ensuring compliance with federal cybersecurity standards. It includes the management of cyber incident reporting procedures in accordance with applicable regulations and the completion of a CMMC Level 2 self-assessment, which must be registered on the Supplier Performance Risk System (SPRS) to demonstrate alignment with the Cybersecurity Maturity Model Certification framework. The work is focused on securing controlled unclassified information within the DoD supply chain and demands continuous monitoring, documentation, and validation of security measures to maintain compliance. This subcontract is issued by the ASC Commodities Division under the Department of Defense with a place of performance in San Diego, California, 92136-3581. It falls under NAICS code 541512 for computer systems design services and was posted on July 15, 2026, with a response deadline of July 23, 2026. The nature of the contract necessitates a thorough understanding of DoD cybersecurity requirements, the ability to execute technical controls, and the capacity to produce auditable records that support certification. Contractors must be prepared to engage in both technical implementation and administrative compliance functions to meet the obligations defined under this agreement.