Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the execution and documentation of a CMMC Level 2 self-assessment to ensure compliance with NIST SP 800-171 standards for safeguarding Covered Defense Information. This subcontract is aimed at validating that cybersecurity controls are properly implemented to protect sensitive data within the defense supply chain. The assessment must be thoroughly documented and aligned with the requirements of the Cybersecurity Maturity Model Certification program at Level 2, which includes a broad range of security practices and processes designed to mitigate common cyber threats facing government contractors. The solicitation is posted by the Department of Defense under the agency name CONSTRUCTION & EQUIPMENT T & IFO EQ, with the place of performance located in Tracy, California, 95304-5000. The NAICS code 541611 indicates this effort falls under Management, Scientific, and Technical Consulting Services. The response deadline is August 17, 2026, and the contract was posted on August 5, 2026. The work is structured as a subcontract and does not specify any set-aside status, meaning it is open to all eligible parties regardless of business size or ownership characteristics. All deliverables must meet federal cybersecurity compliance standards and be submitted before the deadline to fulfill contractual obligations.