Cybersecurity and CMMC Level 2 Compliance Implementation

The contract seeks the implementation and maintenance of cybersecurity controls to achieve CMMC Level 2 compliance for systems handling Federal Controlled Information and Controlled Unclassified Information related to the modification kit program. This subcontract is specifically designated as a Total Small Business Set-Aside under the SBA program, ensuring eligibility and participation are limited to small businesses as defined by FAR 19.5. The work is tied to the NAICS code 541512, indicating it involves custom computer programming services, and performance will occur at Tracy, California with a ZIP code of 95304-5000. The solicitation was posted on July 22, 2026, with a deadline for responses set for August 3, 2026, and the contracting activity falls under the Department of Defense through the LAND SUPPLIER OPNS VEHICLE SPT office. Successful offerors must establish, document, and sustain a comprehensive cybersecurity posture aligned with CMMC Level 2 requirements, ensuring continuous protection of FCI and CUI throughout the lifecycle of the modification kit program. This includes technical implementation, policy development, employee training, audit readiness, and ongoing monitoring and reporting mechanisms. The contract emphasizes adherence to federal cybersecurity standards in a defense supply chain context, requiring proven experience in CMMC compliance, familiarity with DOD systems, and the ability to operate within strict federal compliance timelines. All activities must be performed in accordance with the specified place of performance and within the parameters defined by the DoD's procurement framework.