Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires conducting a CMMC Level 2 self-assessment and implementing the NIST SP 800-171 security controls to safeguard covered defense information related to product data, shipping, and invoicing. This effort is focused on ensuring compliance with federal cybersecurity standards for subcontractors handling sensitive defense-related data. The work must be completed in accordance with the CMMC framework's Level 2 requirements, which include technical, operational, and management practices aligned with NIST SP 800-171 to protect controlled unclassified information. The solicitation is issued as a subcontract under the Department of Defense through DLA Dist San Joaquin, with performance located in Tracy, California, 95304-5000. The NAICS code 541512 indicates the work falls under computer systems design services, suggesting a technical or IT support focus. The response deadline is August 3, 2026, and while no set-aside type is specified, the contract is targeted toward entities capable of delivering cybersecurity compliance services to defense supply chain partners. All activities must be completed to meet federal requirements for securing controlled unclassified information in nonfederal systems.