Cybersecurity Compliance (CMMC Level 2 Assessment and Implementation)

The contract requires comprehensive support to achieve CMMC Level 2 compliance, involving a full suite of cybersecurity services aligned with NIST SP 800-171 and DFARS regulations. This includes conducting a thorough system assessment to identify gaps in current cybersecurity posture, developing and implementing necessary documentation to meet control requirements, and facilitating third-party certification through an accredited C3PAO. The effort is designed to ensure the contractor’s information systems meet the stringent security standards mandated for handling controlled unclassified information within the Department of Defense supply chain. The work is structured as a subcontract under the NAICS code 541512, with performance required at Tracy, California, 95304-5000. The solicitation was posted on July 12, 2026, and responses must be submitted by July 23, 2026. While the contracting office is the Department of Defense under the LAND SUPPLY CHAIN organization, no specific point of contact or set aside designation is provided. Contractors must be prepared to deliver end-to-end CMMC Level 2 readiness, from initial evaluation through certification, to meet DoD’s cybersecurity requirements for defense contractors handling sensitive information.