Cybersecurity Compliance (CMMC Level 2)

The contract requires support for a CMMC Level 2 self-assessment to ensure that systems handling Covered Defense Information meet the cybersecurity requirements outlined in NIST SP 800-171 and the DFARS cybersecurity clauses. This effort is critical for demonstrating compliance with federal standards designed to protect sensitive government data within the defense supply chain, and the contractor must establish, document, and validate controls across all relevant systems. The work is scoped as a subcontract under the Department of Defense's Strategic Acquisition Program Directorate and is tied to NAICS code 541512, which corresponds to computer systems design services. The solicitation is set to close on August 4, 2026, with a posting date of July 20, 2026, indicating a limited window for proposals. Performance is expected to align with DoD cybersecurity mandates, requiring thorough documentation, internal assessments, and remediation activities as needed to achieve and maintain CMMC Level 2 certification. The absence of a set-aside designation suggests open competition, and while no specific place of performance or point of contact is listed, the work must be executed in a manner that fully satisfies the technical and administrative obligations associated with safeguarding defense information under federal regulations.