Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to safeguard covered defense information and achieve CMMC Level 2 compliance. This includes establishing, maintaining, and validating technical and administrative safeguards aligned with the NIST framework, as well as ensuring all processes support continuous compliance and readiness for assessment. The contractor must also establish and operate a robust incident reporting mechanism capable of detecting, responding to, and reporting cybersecurity incidents in accordance with federal requirements. This is a small business set-aside subcontract under NAICS code 541512, issued by the Department of Defense under LAND SUPPLIER OPNS ENGINES, with performance required at a location in Tracy, California, 95304-5000. The solicitation was posted on August 2, 2026, with a response deadline of August 13, 2026. Compliance with all CMMC Level 2 requirements is mandatory, and successful execution will involve not only technical implementation but also comprehensive recordkeeping and audit readiness to demonstrate adherence to federal cybersecurity standards for defense contractors.