Cybersecurity and CUI Compliance (CMMC Level 2)

The contract requires implementation and self-assessment for CMMC Level 2 compliance to safeguard Controlled Unclassified Information related to design, manufacturing, and testing data. It applies specifically to systems that handle technical data and traceability records, ensuring that appropriate security controls are in place to protect sensitive information from unauthorized access, disclosure, or compromise. The contractor must align with the CMMC framework’s requirements to achieve and maintain compliance, which includes documenting policies, conducting internal assessments, and demonstrating readiness for potential audits. This is a subcontract under the Department of Defense, managed by the ASC Commodities Division, with a NAICS code of 541512 indicating information technology services. The solicitation was posted on August 3, 2026, and responses are due by August 17, 2026. The performance location is not specified, and there is no set-aside designation. The contract is accessible via a public DIBBS portal, and while a point of contact is not provided, responsible parties are expected to adhere to all CMMC Level 2 controls and maintain ongoing compliance throughout the contract lifecycle.