Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)

The contract requires the implementation of NIST SP 800-171 security controls across systems that handle Covered Defense Information, ensuring compliance with federal cybersecurity standards for protected unclassified information. This effort is specifically tied to achieving CMMC Level 2 self-assessment certification, which demands a comprehensive documentation and operational readiness review of security practices related to access control, audit and accountability, configuration management, identification and authentication, incident response, maintenance, system and communications protection, and risk assessment. The work must be performed at the designated place of performance in San Diego, California, with delivery expectations aligned to the response deadline of August 12, 2026, and is structured as a subcontract under the Department of Defense. The NAICS code 541512 indicates the focus is on computer systems design services, suggesting the contractor will provide technical expertise to align existing infrastructure with mandatory defense cybersecurity requirements.