Cybersecurity Compliance (CMMC Level 2 Self-Assessment Support)

The contract seeks to support a prime contractor in achieving CMMC Level 2 self-assessment compliance for the handling of controlled unclassified information within the supply chain. The work involves providing expert guidance and implementation support to ensure all NIST SP 800-171 security requirements are met, including the proper identification, protection, and documentation of CUI across systems and processes. The contractor must demonstrate proficiency in assessing current cybersecurity posture, identifying gaps, developing remediation plans, and preparing for internal review or audit readiness under the CMMC framework. This is a subcontract under the Department of Defense with the solicitation tied to the Maritime Supply Chain organization, and performance is required to occur at a designated location in Tracy, California, with a zip code of 95304-5000. The NAICS code 541512 indicates the scope is centered on computer systems design services, aligning with technical implementation and cybersecurity consulting activities. The opportunity was posted on July 16, 2026, with a response deadline of July 27, 2026, and is hosted via the DIBBS platform, indicating it is part of the defense industrial base procurement ecosystem. All activities must align with federal cybersecurity mandates without modification, and the subcontractor must operate with full awareness of the sensitivity of CUI and contractual obligations tied to DoD supply chain security.