Cybersecurity Compliance (CMMC Level 2) Support

The contract seeks support for achieving CMMC Level 2 compliance by facilitating the self-assessment and full implementation of NIST SP 800-171 controls to protect Covered Defense Information as mandated by DFARS 252.204-7012. This effort is critical for ensuring that subcontractors handling sensitive defense data meet the minimum cybersecurity standards required under federal regulations, with all activities focused on preparing the organization for third-party certification at CMMC Level 2. The work involves identifying gaps in existing cybersecurity practices, applying technical and procedural controls outlined in NIST SP 800-171, documenting compliance evidence, and establishing ongoing monitoring mechanisms to maintain adherence. The contract is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services, and is tied to the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. The performance location is specified as Tracy, California, with a ZIP code of 95304-5000, suggesting on-site or localized support may be required. The solicitation was posted on August 4, 2026, and responses must be submitted by August 12, 2026, indicating a short turnaround window for qualified vendors to propose their capabilities. While no set-aside type or point of contact is provided, the urgency of the deadline and the specificity of the compliance requirements reflect the critical nature of securing the defense industrial base against evolving cyber threats.