Cybersecurity Compliance (CMMC Level 2 & DFARS 252.204-7012)

The contract requires the implementation and documentation of comprehensive cybersecurity controls to achieve compliance with CMMC Level 2 and DFARS 252.204-7012 standards for the handling of Controlled Unclassified Information. This effort is focused on establishing a robust security posture that aligns with Department of Defense requirements, ensuring that systems and processes adequately protect CUI through technical, administrative, and physical safeguards. Documentation must be thorough, demonstrating adherence to all applicable NIST SP 800-171 controls and supporting the organization’s ability to pass a CMMC third-party assessment. The work is performed under a subcontract and is tied to the place of performance in Tracy, California, with a zip code of 95304-5000. The solicitation, managed by the Active Devices Division under the Department of Defense, is classified under NAICS code 541512 for Computer Systems Design Services. The response deadline is July 20, 2026, and all deliverables must be completed in alignment with federal cybersecurity mandates. The contractor is expected to provide not only technical implementation but also audit-ready documentation to validate ongoing compliance and readiness for external evaluation.