CMMC Compliance and Cybersecurity Support

The contract seeks support for achieving CMMC Level 2 compliance to fulfill DFARS 252.204-7012 requirements, focusing on either conducting a self-assessment or coordinating with a Certified Third-Party Assessment Organization to validate cybersecurity posture. The work is scoped to ensure the subcontractor meets the Department of Defense’s evolving cybersecurity standards for handling controlled unclassified information, with an emphasis on documentation, policy implementation, and technical controls aligned with the CMMC framework. Services may include guidance on gap analysis, remediation planning, and preparation for formal assessment by an authorized C3PAO. This subcontract falls under NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the broader Department of Defense. The contract was posted on July 15, 2026, and is positioned as a performance-based obligation without a specific set-aside designation. Place of performance and point of contact details are not provided, but the work is expected to be executed remotely or at the contractor’s facility in alignment with DOD cybersecurity protocols. The contract reference number SPE4A626PY103 links to official procurement records for tracking and verification purposes.