Cybersecurity and CUI Safeguarding (CMMC Level 2 Compliance)

The contract requires the implementation and maintenance of robust cybersecurity controls to safeguard Covered Defense Information and Controlled Unclassified Information in full compliance with NIST SP 800-171 and the Cybersecurity Maturity Model Certification Level 2 standards. This subcontract obligates the contractor to establish, document, and sustain a comprehensive security posture that addresses the full range of technical, operational, and managerial requirements outlined in these frameworks, ensuring that all systems and processes handling sensitive government data are protected against unauthorized access, disclosure, or compromise. The work must be performed at the designated location in San Diego, California, with strict adherence to all federal cybersecurity directives and continuous monitoring to maintain compliance. This opportunity is issued under the NAICS code 541512 for Computer Systems Design Services by the ASC Commodities Division of the Department of Defense, and responses must be submitted by August 4, 2026. As a subcontract, it is intended to support a broader procurement effort, and the successful offeror will be expected to demonstrate proven experience with CMMC Level 2 implementation, including evidence of prior compliance, documented policies and procedures, and the capability to undergo third-party assessments. Although no specific set-aside status is indicated, all proposers must meet the technical and security criteria required by the federal government to handle controlled unclassified information, and failure to satisfy these requirements will result in automatic disqualification.