Cybersecurity and CUI Safeguarding (CMMC Level 2)

This contract requires the implementation of NIST SP 800-171 security controls and full compliance with CMMC Level 2 to safeguard Controlled Unclassified Information (CUI) across all systems handling contract data. The work involves establishing, maintaining, and validating a robust cybersecurity framework that aligns with federal standards to protect sensitive information from unauthorized access, disclosure, or compromise, ensuring end-to-end compliance throughout the system lifecycle. The contractor must demonstrate capability to meet stringent requirements around access control, incident response, audit logging, media protection, and system and communications protection, all while operating within a DOD environment. The contract is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at Tracy, California, 95304-5000. It is classified under NAICS code 541512, indicating services related to computer systems design and related activities. The opportunity was posted on July 15, 2026, with a response deadline of July 20, 2026, and is accessible via the DLA Dibbs platform. The successful bidder must possess the technical expertise and documented processes to achieve and sustain CMMC Level 2 certification, including third-party assessment readiness, and must be prepared to support ongoing compliance monitoring and reporting as required by federal defense contracting standards.