Cybersecurity Compliance and CMMC Level 2 Implementation

The contract seeks implementation and maintenance of cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for handling covered defense information. The work involves establishing, documenting, and sustaining the necessary technical and administrative safeguards required to protect sensitive data within the defense supply chain, with a focus on achieving and maintaining certification at CMMC Level 2. All activities must align with federal requirements governing the safeguarding of controlled unclassified information and must be tailored to the specific operational environment of the subcontractor. The contract is classified as a subcontract under NAICS code 541512, tied to the Department of Defense’s Aviation Supply Chain initiative, with performance required at a specified location in San Diego, California. Proposals are due by May 19, 2026, and must demonstrate proven experience in deploying and sustaining NIST and CMMC compliance frameworks. The contractor is expected to provide ongoing monitoring, incident response readiness, audit support, and continuous improvement of security controls throughout the lifecycle of the agreement. Failure to maintain compliance may result in termination or financial penalties.