Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and self-assessment of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls to safeguard covered defense information in compliance with NIST Special Publication 800-171 and applicable DFARS clauses. The work involves establishing and validating a comprehensive cybersecurity framework that meets the specified standards for protecting sensitive information, with the contractor responsible for demonstrating full adherence through internal assessment processes. This subcontract is focused on achieving and maintaining CMMC Level 2 certification as a prerequisite for handling classified or controlled unclassified information within the Department of Defense supply chain. The performance location is in Tracy, California, with a zip code of 95304-5000, and the contracting office falls under the Electrical Devices Division of the Department of Defense. The solicitation was posted on July 20, 2026, and responses are due by July 31, 2026. The North American Industry Classification System code for this opportunity is 541512, indicating it pertains to computer systems design and related services. This subcontract is not subject to any specific set-aside criteria and is part of broader defensive cybersecurity efforts to ensure consistent, certified protection across defense contractors.