Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract requires the implementation and assessment of CMMC Level 2 cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST SP 800-171 and DFARS regulations. The work involves evaluating existing systems, applying required security practices, and preparing for a formal CMMC assessment to demonstrate compliance. All activities must be performed at the designated place of performance in San Diego, California, with specific attention to protecting sensitive defense-related data throughout the system lifecycle. This subcontract is issued under NAICS code 541512 for Computer Systems Design Services and is sponsored by the Department of Defense through LSO Combat Vehicles and Armament. The solicitation was posted on August 2, 2026, with a mandatory response deadline of August 13, 2026. Although no set-aside type is specified, the contract expects the contractor to have the technical expertise and documentation processes necessary to meet federal cybersecurity standards and pass validation by a certified third-party assessor. Failure to meet all requirements may result in non-compliance and loss of eligibility for future defense contracts.