Cybersecurity Compliance and CMMC Self-Assessment Support

The contract supports a CMMC Level 2 self-assessment for a Department of Defense subcontractor, requiring comprehensive cybersecurity compliance activities including documentation, system hardening, and alignment with DFARS 252.204-7012 for cyber incident reporting. Work must be performed in Tracy, California, with a focus on achieving and demonstrating readiness for CMMC Level 2 certification, ensuring all necessary controls are implemented and documented to meet federal cybersecurity standards for contractors handling controlled unclassified information. The effort is scoped under NAICS code 541512 for computer systems design services and is issued as a subcontract through the Active Devices Division. The solicitation was posted on July 16, 2026, with responses due by July 27, 2026, and no set-aside classification has been designated. While no point of contact is listed, the performance location is specified as Tracy, CA, with a zip code of 95304-5000. The contractor is expected to deliver a full suite of deliverables that validate adherence to the CMMC framework, including evidence of secure configuration, access controls, incident response readiness, and documentation of policies and procedures consistent with DFARS requirements. Failure to meet these standards may result in non-compliance and loss of eligibility for future DoD contracts.