Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

The contract requires the implementation and self-assessment of cybersecurity controls to safeguard covered defense information in alignment with NIST SP 800-171 and applicable DFARS clauses, ensuring compliance with the broader Cybersecurity Maturity Model Certification Level 2 framework. The subcontractor must establish, document, and maintain a robust cybersecurity posture that meets federal standards for protecting controlled unclassified information within its systems and processes, conducting a formal self-assessment to validate adherence to all required controls. This obligation is critical for any entity handling sensitive defense data and must be fully operational prior to contract award and sustained throughout performance. The solicitation is posted under the NAICS code 541512 for computer systems design services and is issued by the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION. The response deadline is July 27, 2026, and performance is expected to occur under the terms of a subcontract, with no specific place of performance or set-aside designation provided. Interested parties must review the full solicitation on the DIBBS platform using the provided link to ensure complete understanding of requirements, timelines, and submission protocols. Compliance with all NIST and DFARS mandates is non-negotiable and forms the basis for contract eligibility and continued performance.