Cybersecurity Compliance (CMMC Level 2 Assessment and Maintenance)

The contract seeks subcontractor support to achieve and maintain CMMC Level 2 compliance for systems handling Controlled Unclassified Information, with a focus on conducting a NIST SP 800-171 assessment, developing a comprehensive System Security Plan, and ensuring full audit readiness. The work involves implementing required security controls, documenting policies and procedures, and aligning organizational practices with federal cyber standards to pass a third-party CMMC assessment. The effort is mission-critical for protecting sensitive data within the Department of Defense supply chain and requires demonstrated expertise in cybersecurity compliance frameworks. Performance is to be conducted at Tracy, California, with a ZIP code of 95304-5000, and the contract type is a subcontract under NAICS code 541512, which categorizes it under Computer Systems Design Services. The solicitation was posted on June 28, 2026, and responses are due by July 9, 2026. The contracting entity is the Land Supply Chain organization under the Department of Defense, indicating this support is critical to defense logistics and procurement systems. All work must be completed in full alignment with CMMC Level 2 requirements to ensure continuous compliance and operational authorization to process Controlled Unclassified Information.