Cybersecurity Incident Reporting and CMMC Compliance Support

This contract requires comprehensive support to ensure compliance with DFARS 252.204-7012 and the security requirements outlined in NIST SP 800-171, with a specific focus on achieving CMMC Level 2 certification through a self-assessment process. The scope includes the implementation of technical and administrative safeguards to protect Controlled Unclassified Information, the documentation of security controls, and the establishment of procedures for timely cyber incident reporting as mandated by federal regulations. All activities must align with the standards set forth by the Department of Defense to maintain the integrity and confidentiality of sensitive data handled under this subcontract. The award is issued under the NAICS code 541512 for computer systems design services and is managed by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense. Performance is centered in Bremerton, Washington, with a zip code of 98314-6001. The submission deadline for responses is August 10, 2026, and the solicitation was posted on August 2, 2026. This is a subcontract opportunity, meaning the winning contractor will be supporting a prime contractor or another entity under a larger DoD contract, and all cybersecurity measures must be completed in full accordance with federal requirements without exception.