Cybersecurity Compliance and CMMC Level 2 Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls and CMMC Level 2 compliance measures to safeguard covered defense information across all applicable systems. This includes conducting comprehensive system assessments to validate adherence to security requirements, establishing robust incident detection and reporting protocols, and ensuring continuous alignment with federal cybersecurity standards for defense contractors. All activities must be performed in support of protecting sensitive data handled by the Electrical Devices Division under the Department of Defense. The work is to be performed at a specified location in San Diego, California, with a strict submission deadline of June 25, 2026, and the solicitation was posted on June 14, 2026. This is a subcontract opportunity classified under NAICS code 541512 for computer systems design services. The contract mandates full compliance with CMMC Level 2 requirements, which involve documented policies, personnel training, access controls, and technical safeguards, all subject to verification through audit or assessment. Failure to maintain compliance may result in contract termination or loss of eligibility for future defense-related work.