Cybersecurity Compliance Implementation (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 and CMMC Level 2 standards to safeguard controlled unclassified information within the Department of Defense environment. This includes establishing technical, administrative, and physical safeguards, conducting regular audits and updates to ensure continuous compliance, and preparing for and responding to third-party assessments that validate adherence to the required framework. The contractor must integrate incident detection and reporting processes that meet DOD criteria, ensuring timely notification and remediation of security breaches or vulnerabilities. Performance is expected to be carried out at the specified location in San Diego, California, with all activities tied to supporting the ASC Commodities Division under a subcontract structure. The work falls under NAICS code 541512 for computer systems design services and is subject to strict deadlines, with responses due by July 28, 2026. Compliance with these requirements is critical to maintaining the integrity of DoD data systems and sustaining eligibility for future defense-related contracts.