Cybersecurity Compliance (CMMC Level 2) Implementation

The contract requires support for achieving CMMC Level 2 compliance by implementing, documenting, and self-assessing NIST SP 800-171 controls necessary for handling Covered Defense Information. The work focuses on ensuring the contractor’s systems and processes meet the cybersecurity requirements mandated for organizations handling sensitive DoD data, with emphasis on policy development, control implementation, evidence collection, and readiness for assessment. The scope includes all activities needed to close compliance gaps and maintain ongoing adherence to the framework throughout the contract period. The contract is a subcontract under the Department of Defense, issued by the ASC SUPPLIER OPER OEM DIVISION, with performance required at Tracy, California, zip code 95304-5000. The solicitation was posted on July 16, 2026, and responses are due by July 24, 2026, under NAICS code 541512 for Computer Systems Design Services. The contract is not subject to any specified set-aside provisions and is accessible through the DIBBS platform, with all compliance activities centered around safeguarding CDI in alignment with federal cybersecurity standards.