San Diego Unified Port District

Buyer is seeking services to implement a secure enclave aligned with the Department of Defense's Cybersecurity Maturity Model Certification (CMMC) Level 2. Buyer supports United States Navy programs and must comply with DFARS clause 252.204-7012 and 252.204-7021. Buyer requires a strategic partner to help achieve and maintain compliance through secure environment creation, documentation development, and continuous monitoring. The selected service provider will be responsible for ongoing CMMC compliance activities and safeguarding of Controlled Unclassified Information.

• 5/7/2025 - Information Meeting
• 5/15/2025 - Submit Questions By
• 5/30/2025 - Proposal Due Date
• 8/4/2025 - Oral Interviews
• 9/1/2025 - Tentative Project Start Date

• Experience delivering secure enclave services and Compliance as a Service solutions
• Successfully performed similar services for a government agency or defense-related organization
• Experience supporting CMMC Level 2 or higher compliance efforts

• Design and implement secure cloud-based enclave for CMMC compliance
• Extend secure enclave boundary to on-premises infrastructure
• Develop CMMC-compliant System Security Plans, policies, and procedures
• Assist with formal CMMC audit process engaging a C3PAO
• Provide technical engineering services for Microsoft Azure government environments
• Securely migrate data into compliant enclave from non-compliant systems
• Implement secure integration between on-premises and cloud environments
• Support integration of Microsoft Office 365 GCC High within the enclave
• Develop process to migrate from .org to .gov domain
• Provide ongoing compliance monitoring and reporting services