Cybersecurity Compliance (CMMC Level 2) Implementation

The contract requires the implementation and self-assessment of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls to safeguard covered defense information, with a strong alignment to the National Institute of Standards and Technology Special Publication 800-171 guidelines. This includes establishing and documenting security practices across all applicable domains, ensuring compliance with the full scope of CMMC Level 2 requirements, and preparing for assessment readiness through internal validation. The effort also mandates registration in the Supplier Performance Risk System (SPRS) to maintain an accurate and current cybersecurity posture rating within the Department of Defense’s ecosystem. This subcontract is issued by the Active Devices Division under the Department of Defense and is tied to a performance location in Columbus, Ohio, with a zip code of 43213. The solicitation falls under NAICS code 541512 for computer systems design services and is open for response until August 13, 2026, with the request for quotation posted on August 2, 2026. The contractor must deliver full compliance with CMMC Level 2 standards, including the protection of controlled unclassified information, and provide verifiable evidence of implementation through a formal self-assessment process. Failure to meet these requirements will impact eligibility for future defense contracts and may result in non-compliance penalties.