Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires the implementation and self-assessment of NIST SP 800-171 controls and CMMC Level 2 compliance to protect covered defense information, with a focus on ensuring robust cybersecurity posture and timely cyber incident reporting. The effort is tied to safeguarding sensitive data within the maritime supply chain and demands full adherence to federal cybersecurity standards as defined by the Department of Defense. The contractor must demonstrate capability to meet all 110 controls outlined in NIST SP 800-171 and achieve CMMC Level 2 certification through documented practices, policies, and operational maturity. This is a women-owned small business set-aside subcontract under NAICS code 541512 for cybersecurity services, with performance occurring in Tracy, California, at ZIP code 95304-5000. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. The contract is managed under the Maritime Supply Chain division of the Department of Defense, and compliance with all security requirements must be validated through internal assessment and documentation prior to award. Successful bidders must have proven experience in implementing and maintaining cybersecurity frameworks for defense contractors and be prepared to support ongoing monitoring and reporting obligations.