Cybersecurity Compliance (CMMC Level 2) Support

This contract seeks subcontractor support to implement CMMC Level 2 cybersecurity controls designed to safeguard controlled unclassified information, particularly export-controlled technical data, within a Department of Defense environment. The work is focused on ensuring compliance with the Cybersecurity Maturity Model Certification framework to meet federal requirements for protecting sensitive but unclassified information from unauthorized access, disclosure, or compromise. The subcontractor will be expected to deploy and validate technical and administrative safeguards aligned with NIST SP 800-171 revision 2, including access control, audit and accountability, configuration management, and incident response measures specifically tailored to the handling of export-restricted technical data. The performance location is established in San Diego, California, with the work conducted under NAICS code 541512 for computer systems design services. The opportunity is posted as a subcontract under the Electrical Devices Division and was published on July 9, 2026, with responses due by July 20, 2026. Participation requires full familiarity with DOD cybersecurity standards, the ability to integrate controls into existing technical infrastructure, and experience with export control compliance frameworks. All work must be performed in accordance with federal regulations governing the protection of controlled unclassified information and the obligations of subcontractors supporting defense-related programs.