Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)

The contract requires implementation of NIST SP 800-171 security controls to safeguard controlled unclassified information and achieve readiness for CMMC Level 2 certification, ensuring alignment with Department of Defense cybersecurity standards. The recipient must establish formal cyber incident reporting procedures that comply with federal mandates, enabling timely detection, response, and notification of security breaches. All work is to be performed at the designated location in Tracy, California, with a zip code of 95304-5000, under the oversight of the ASC Commodities Division within the Department of Defense. This subcontract is classified under NAICS code 541512, indicating a focus on computer systems design services, and responses must be submitted by the deadline of July 24, 2026, with the solicitation published on July 16, 2026.