Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and thorough documentation of all NIST SP 800-171 security controls to protect covered defense information, ensuring alignment with the cybersecurity standards mandated for defense contractors. The work involves a comprehensive self-assessment against the Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements, which includes verifying the correct configuration, monitoring, and enforcement of controls across systems handling sensitive defense data. The contractor must deliver documented evidence of compliance, demonstrating operational readiness and adherence to federal cybersecurity frameworks. This subcontract is issued under NAICS code 541512 for computer systems design services and is performance-based in San Diego, California, with a response deadline of July 24, 2026. The contracting activity falls under the Department of Defense, specifically the ASC SUPPLIER OPER AE AND AF DIV, with no set-aside designation. All deliverables must be completed in time to satisfy the CMMC Level 2 assessment criteria, and the contractor is expected to maintain ongoing compliance with the documented controls to safeguard covered defense information throughout the contract period.