Cybersecurity Compliance and CMMC Assessment Support

The contract seeks support for implementing and assessing cybersecurity controls aligned with NIST SP 800-171 to achieve CMMC Level 2 certification, requiring a thorough gap analysis to identify deficiencies in current security practices, development of a System Security Plan that documents policies and procedures, and ongoing compliance reporting to demonstrate adherence to federal cybersecurity requirements. The scope includes all activities necessary to bridge identified security gaps, ensure proper documentation, and prepare for third-party assessment, with deliverables focused on full compliance readiness and audit preparedness. This subcontract is issued under the Department of Defense and is tied to the NAICS code 541512 for computer systems design services, with performance required at Tracy, California, 95304-5000. Proposals must be submitted by July 27, 2026, following a solicitation posted on July 16, 2026, and the work is intended to support LSO Combat Vehicles and Armament’s efforts to meet mandatory DoD cybersecurity standards for contractors handling controlled unclassified information.