Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the performance and submission of a CMMC Level 2 self-assessment for systems that handle controlled unclassified information, with full alignment to the NIST SP 800-171 security requirements. This obligation is critical for ensuring that cybersecurity controls are properly implemented and documented to protect sensitive government data. The work must be completed and submitted by the response deadline of July 20, 2026, following the specific guidelines for CMMC Level 2 compliance, which include addressing 110 security controls across 14 families such as access control, awareness and training, audit and accountability, and risk assessment. This subcontract is issued under the NAICS code 541512 for computer systems design services and is tied to the Department of Defense, specifically the ACTIVE DEVICES DIVISION, with performance occurring in San Diego, California, at the zip code 92136-3581. The solicitation was posted on July 9, 2026, and the contractor must possess the technical capability to assess current systems, identify gaps against NIST 800-171, remediate deficiencies where necessary, and formally attest to compliance through a documented self-assessment report. Failure to meet the deadline or to achieve full compliance could result in contract non-performance and loss of eligibility for future DoD work.