Cybersecurity & CUI Safeguarding (CMMC Level 2 Compliance)

The contract requires the implementation and maintenance of robust cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012, specifically targeting CMMC Level 2 compliance. This subcontract is focused on ensuring comprehensive protection of sensitive data processed, stored, or transmitted by the contractor, with strict adherence to technical and administrative safeguards outlined in the referenced standards. The work must be performed at the designated place of performance in Tracy, California, with a zip code of 95304-5000, and is classified under NAICS code 541512 for Computer Systems Design Services. Responses to this solicitation must be submitted no later than August 12, 2026, and the opportunity was posted on August 4, 2026. The contracting entity is the ASC Commodities Division under the Department of Defense, indicating this effort supports critical defense-related operations requiring stringent information security protocols. While no set-aside classification is specified, the requirement demands proven capability in cybersecurity infrastructure, documentation, and continuous compliance monitoring to meet federal cybersecurity mandates. All work must be executed to maintain audit readiness and ensure sustained alignment with CMMC Level 2 requirements throughout the contract period.