Cybersecurity Compliance and CMMC Assessment

This contract focuses on conducting a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment and implementing the necessary controls from NIST SP 800-171 to ensure compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012. The assessment and implementation work is aimed at meeting stringent Department of Defense cybersecurity requirements, which are critical for protecting controlled unclassified information within the supply chain. The subcontract, titled "Cybersecurity Compliance and CMMC Assessment," is issued by the ASC Commodities Division of the Department of Defense. The place of performance is specified as Tracy, ZIP code 95304-5000. Although there is no solicitation number or type of set-aside indicated, the NAICS code assigned to the contract is 541512, which pertains to computer systems design services. Proposals for this opportunity must be submitted by May 26, 2026, following the posting date of May 17, 2026. The contract is accessible for further information and submission through the Department of Defense internet bidding system.