Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls to safeguard Controlled Unclassified Information (CUI) within contractor systems, ensuring compliance with Department of Defense cybersecurity standards. The work involves a full alignment with CMMC Level 2 requirements, including the deployment of technical, operational, and administrative safeguards to protect CUI throughout the system lifecycle. A third-party assessment by a C3PAO is mandatory to validate compliance, and the successful contractor must demonstrate documented processes, trained personnel, and system-level controls that meet the defined framework. Performance of this subcontract is centered in Tracy, California, with a ZIP code of 95304-5000, and is solicited under the NAICS code 541512 for Computer Systems Design Services. The opportunity is issued by LSO COMBAT VEHICLES AND ARMAMENT under the Department of Defense, and responses must be submitted by August 17, 2026. The contract is structured as a subcontract with no set-aside designation, meaning it is open to all qualified entities. While no point of contact is provided, the official solicitation portal is accessible via the designated DIBBS link for further details and submission procedures.