Cybersecurity Compliance and CMMC Assessment Support

The contract requires support for achieving and maintaining Cybersecurity Maturity Model Certification (CMMC) Level 2 readiness, ensuring full compliance with NIST SP 800-171 standards, and properly safeguarding covered defense information as mandated by DFARS 252.204-7012 and clause 252.240-7997. This includes conducting a self-assessment of current cybersecurity posture, implementing necessary controls, documenting procedures, and preparing for potential third-party validation under the CMMC framework. All activities must align with Department of Defense requirements for protecting controlled unclassified information within contractor systems. The subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance expected at Tracy, California, 95304-5000. It falls under NAICS code 541512 for computer systems design services and is solicited as a subcontract opportunity with a response deadline of July 22, 2026. The work involves close collaboration with government standards to ensure continuous compliance, risk mitigation, and operational readiness for handling sensitive defense data. All deliverables must demonstrate evidence-based compliance and readiness for audit or assessment under the CMMC program.