Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and maintenance of CMMC Level 2 cybersecurity controls for systems that process, store, or transmit Controlled Unclassified Information (CUI) critical to contract performance. This effort is aimed at ensuring compliance with the Cybersecurity Maturity Model Certification framework to safeguard sensitive data throughout the lifecycle of the work being performed. The subcontractor must establish and sustain the necessary technical and procedural safeguards aligned with CMMC Level 2 requirements, which include access control, awareness training, audit and accountability, configuration management, identification and authentication, and incident response. The solicitation is associated with the Department of Defense under the agency name LAND SUPPLY CHAIN and falls under NAICS code 541512 for computer systems design services. The place of performance is specified as Tracy, California, with a ZIP code of 95304-5000. Bidders must submit their proposals by the deadline of July 6, 2026, following a posting date of June 25, 2026. The contract type is explicitly a subcontract and no set-aside provisions are indicated. All work must be conducted in strict adherence to federal cybersecurity standards, with ongoing monitoring and documentation required to prove continued compliance.