Cybersecurity Compliance and CMMC Assessment

The contract requires the implementation and assessment of cybersecurity practices aligned with CMMC Level 2 and NIST SP 800-171 standards, focusing on achieving audit readiness and developing comprehensive security policies. The work involves establishing technical and administrative controls to meet federal cybersecurity requirements, ensuring the contractor can demonstrate compliance through documented procedures, system configurations, and employee training. The goal is to prepare the organization for an official CMMC assessment by verifying that all required practices are properly integrated and operational. The contract is a subcontract issued by the Department of Defense under the ASC SUPPLIER OPER OEM DIVISION, with performance expected at a location in Tracy, California, 95304-5000. It falls under NAICS code 541512 for computer systems design services and is open for response through July 29, 2026. The nature of the work demands a thorough understanding of both the NIST framework and CMMC maturity levels, with emphasis on continuous monitoring, incident response readiness, and documentation of security controls. The contractor must deliver a fully compliant environment capable of passing a third-party audit without remediation gaps.