CMMC Level 2 Cybersecurity Compliance

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information throughout manufacturing processes and data submission activities, with the ultimate goal of achieving CMMC Level 2 certification. This includes establishing and maintaining robust cybersecurity practices aligned with federal standards to ensure the confidentiality, integrity, and availability of sensitive defense data handled by the contractor. The scope encompasses technical, administrative, and physical safeguards necessary to meet CMMC Level 2 requirements, covering areas such as access control, incident response, audit logging, and system security planning. Performance of this subcontract is located in Tracy, California, with a specific focus on manufacturing operations and associated data handling. The contract falls under NAICS code 541512, indicating it is related to computer systems design and related services, and is issued by the Department of Defense through the Fluid Handling Division. Bidders must submit responses by July 31, 2026, and the contract is intended to support defense-related supply chain resilience by ensuring compliance with federal cybersecurity mandates. No set-aside provisions are specified, and the contract is open to eligible subcontractors capable of meeting the stringent security and compliance obligations outlined.