CMMC Level 2 Cybersecurity Implementation

The contract requires the implementation and ongoing maintenance of CMMC Level 2 cybersecurity controls for systems that handle Covered Defense Information, ensuring full compliance with the Cybersecurity Maturity Model Certification framework. This includes the development of a System Security Plan that documents all security controls, procedures, and risk management strategies, as well as preparing the organization for official CMMC audits by validating that all required safeguards are properly configured, documented, and operational. The effort is focused on achieving and sustaining audit readiness to meet Department of Defense requirements for handling sensitive defense data. The work is scoped as a subcontract under the NAICS code 541512 for computer systems design services, with the place of performance located in San Diego, California, 92136-3581. The contract is solicited by the Nuclear Reactor Program under the Department of Defense, with a response deadline of August 6, 2026. The project demands technical expertise in cybersecurity frameworks, experience with CMMC Level 2 requirements, and the ability to deliver both documentation and technical configurations that withstand third-party assessment. All activities must align with federal standards for protecting controlled unclassified information within defense-related systems.