Cybersecurity Compliance & CDI Management

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls and CMMC Level 2 compliance measures to protect Covered Defense Information, ensuring that all cybersecurity requirements are met according to Department of Defense standards. This subcontract focuses on establishing a robust cybersecurity framework that safeguards sensitive data through technical, administrative, and physical safeguards aligned with federal guidelines. The work must be performed at the designated location in Tracy, California, with a ZIP code of 95304-5000, and is classified under NAICS code 541618 for other scientific and technical consulting services. The solicitation was posted on July 30, 2026, with responses due by August 7, 2026, and is issued by the ASC Commodities Division under the Department of Defense. The contract is structured as a subcontract and does not include any set-aside designation. While no point of contact information is provided, the full solicitation details can be accessed via the online link associated with the request. All work must be completed in accordance with evolving federal cybersecurity mandates and demonstrate continuous compliance to maintain authorization for handling defense-related information.