Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of CMMC Level 2 cybersecurity controls to safeguard Covered Defense Information, ensuring full alignment with NIST SP 800-171 requirements and readiness for formal audits. This subcontract pertains to securing sensitive data processed or stored by the contractor in support of Department of Defense operations, with a specific place of performance located in Tracy, California, at ZIP code 95304-5000. The effort is classified under NAICS code 541512, indicating it relates to computer systems design services, and must be executed by a qualified entity capable of meeting rigorous federal cyber standards. The solicitation is open for responses until July 30, 2026, with the posting date set for July 19, 2026, and is managed by the Fluid Handling Division under the Department of Defense. While no set-aside provisions are specified, the contractor must be fully prepared to demonstrate compliance through documented policies, technical controls, personnel training, and audit trails. The contractor will be expected to sustain continuous compliance, not merely achieve it at a single point in time, and must maintain infrastructure and procedures capable of withstanding assessment by authorized DOD auditor or third-party assessors without deviation.