Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and ongoing maintenance of CMMC Level 2 cybersecurity controls to safeguard controlled unclassified information in accordance with DFARS 252.204-7012 and UCAS compliance standards, ensuring that all systems and processes meet the Department of Defense’s mandatory cybersecurity requirements. The work must be performed at the specified place of performance in Tracy, California, with a zip code of 95304-5000, and the contractor must demonstrate full alignment with the NIST SP 800-171 controls as mandated under CMMC Level 2. This is a subcontract under the NAICS code 541512, indicating the nature of the work involves computer systems design and related services supporting defense supply chain security. The solicitation was posted on July 23, 2026, and proposals must be submitted no later than August 3, 2026, with no set-aside provisions specified, meaning it is open to all eligible parties. The contracting activity falls under the Maritime Supply Chain division of the Department of Defense, and while no point of contact information is provided, all inquiries and submissions must be processed through the official DIBBS portal at the linked URL. Successful performance will include not only initial implementation of controls but also continuous monitoring, documentation, and readiness for third-party assessment to maintain compliance throughout the contract lifecycle.