Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

The contract requires the implementation and documentation of cybersecurity controls in alignment with NIST SP 800-171 standards and achieving CMMC Level 2 compliance. This includes tasks such as developing system security plans, conducting security assessments, and managing incident reporting procedures specifically for Covered Defense Information (CDI). The work is to be performed as a subcontract under the Department of Defense's ASC Commodities Division, with the primary location for performance being Tracy, California. The solicitation was posted on May 13, 2026, with a response deadline of May 18, 2026. It falls under NAICS code 541512, which pertains to computer systems design services. The contract emphasizes ensuring that cybersecurity measures meet stringent federal requirements to protect sensitive defense information, highlighting the criticality of maintaining compliance with both NIST and CMMC frameworks. This supports the broader goal of safeguarding defense-related data through rigorous security planning, assessment, and incident management.