Cybersecurity & CMMC Compliance Support

The contract seeks specialized cybersecurity services to implement NIST SP 800-171 controls and achieve CMMC Level 2 readiness for a Department of Defense subcontractor, ensuring full compliance with DFARS 252.204-7012 and 252.240-7997 requirements. The work will include assessing current cybersecurity posture, identifying gaps in controls, deploying necessary technical and procedural safeguards, and providing sustained audit support to prepare for and pass official CMMC evaluation. All activities must align with federal cybersecurity standards to protect controlled unclassified information within the defense supply chain. This is a total small business set-aside under NAICS code 541512, indicating eligibility is restricted to small businesses meeting SBA guidelines, with performance expected to occur in Tracy, California, at the ZIP code 95304-5000. The solicitation was posted on August 5, 2026, with proposals due by August 17, 2026, and is issued under the LSO Combat Vehicles and Armament organization as a subcontract opportunity. The requirement emphasizes practical readiness over theoretical compliance, focusing on operational implementation and audit readiness to meet Department of Defense cybersecurity mandates.