Cybersecurity & CUI Safeguarding (CMMC Level 2)

The contract requires the implementation and maintenance of robust cybersecurity controls to safeguard covered defense information in accordance with NIST SP 800-171 and CMMC Level 2 standards. This subcontract is focused on ensuring that all systems and processes handling sensitive data meet the mandated security requirements to protect controlled unclassified information. The work must be performed at the designated location in San Diego, CA, with strict adherence to the technical and procedural guidelines established by the Department of Defense. The solicitation was posted on July 30, 2026, with a response deadline of August 10, 2026, and is classified under NAICS code 541512 for computer systems design services. The contracting activity falls under the Fluid Handling Division of the Department of Defense, indicating the scope is likely tied to systems supporting defense infrastructure or equipment. Compliance with CMMC Level 2 is non-negotiable and requires documented policies, continuous monitoring, and third-party validation of security practices. Contractors must demonstrate the ability to enforce access controls, audit logging, incident response, and secure configuration management across all relevant environments.