Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the performance and documentation of a CMMC Level 2 self-assessment in accordance with DFARS 252.204-7012, focusing on the full implementation of all NIST SP 800-171 security controls and the establishment of compliant cyber incident reporting procedures. This effort is critical for ensuring that the contractor meets the Department of Defense’s cybersecurity requirements for handling controlled unclassified information and must be completed with thorough documentation to demonstrate adherence to the framework. The work must be executed by the specified deadline and is structured as a subcontract under a broader defense acquisition effort. The solicitation is posted under NAICS code 541512 for Computer Systems Design Services and is associated with the Department of Defense, specifically the San Diego office, with performance required at the 92136-3581 zip code. Responses are due by July 20, 2026, and while no set-aside designation is indicated, the opportunity is open to qualified subcontractors who can meet the stringent cybersecurity compliance mandates. All deliverables must align with federal standards to support the DoD’s objective of securing its supply chain against evolving cyber threats.