Cybersecurity Compliance & CMMC Assessment

The contract requires the execution of a CMMC Level 2 assessment to validate cybersecurity posture in alignment with NIST SP 800-171 Rev 1 standards, ensuring all required controls are properly implemented and documented. The deliverables include a comprehensive System Security Plan that outlines the organization’s security controls, procedures, and risk management strategies, along with a completed SPRS submission that includes a self-assessment score of exactly 110, demonstrating full compliance with the baseline requirements. The assessment and documentation must reflect a thorough understanding of federal cybersecurity mandates and be performed to meet the stringent accountability standards expected by the Department of Defense. This subcontract is issued under NAICS code 541611 for management consulting services and is tied to the Land Supply Chain office within the Department of Defense, with performance required at a specified location in Tracy, California, ZIP 95304-5000. Responses are due by May 22, 2026, and the solicitation was posted on May 11, 2026, indicating a narrow window for preparation and submission. The lack of a solicitation number suggests this may be a direct solicitation or informal procurement mechanism, but the requirement for a precise SPRS score and documented compliance reinforces the high-stakes nature of the engagement, where failure to meet the 110 score could result in rejection or contractual non-performance.