Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and documentation of CMMC Level 2 cybersecurity controls to protect covered defense information in accordance with DFARS 252.204-7008. This includes developing a System Security Plan, conducting a self-assessment against the CMMC framework, and creating a Plan of Action and Milestones to address any gaps or deficiencies. The effort is focused on achieving full compliance with federal cybersecurity standards for handling sensitive defense data. The contract is structured as a subcontract under the Department of Defense, with performance required at the location in Tracy, California, with a zip code of 95304-5000. It falls under NAICS code 541512, indicating it pertains to computer systems design services. The solicitation was posted on July 16, 2026, and responses are due by July 24, 2026. All deliverables must align with the CMMC Level 2 maturity requirements, ensuring robust safeguards, continuous monitoring, and formal documentation to meet DoD cybersecurity expectations.