Cybersecurity and CMMC Assessment Services

The contract entails the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to safeguard controlled unclassified information within the defense supply chain. It further requires full compliance with Cybersecurity Maturity Model Certification Level 2 standards, ensuring that the contractor meets rigorous cybersecurity requirements aligned with Department of Defense guidelines. The contractor must establish and sustain a robust cybersecurity posture that includes continuous monitoring, vulnerability management, and employee training to meet CMMC Level 2 criteria. Additionally, the contract mandates the timely reporting of any cyber incidents to relevant authorities within 72 hours of discovery, with defined procedures for containment, documentation, and notification to ensure regulatory compliance and operational resilience. Performance of this subcontract is centered at Tracy, California, with a 95304-5000 postal designation, and falls under the NAICS code 541512 for computer systems design services. The work is solicited under the U.S. Department of Defense’s Maritime Supply Chain program, indicating that the contractor will be supporting critical defense infrastructure reliant on secure information handling. Subcontractors must respond by August 10, 2026, and are expected to demonstrate proven expertise in federal cybersecurity frameworks, particularly in operationalizing NIST controls and achieving CMMC certification within a federally regulated environment.