CMMC Level 2 & NIST SP 800-171 Compliance Support

The contract requires advisory services to guide the achievement and maintenance of CMMC Level 2 certification and full compliance with NIST SP 800-171 standards for the protection of Controlled Unclassified Information. This includes conducting comprehensive system assessments, developing and updating required documentation, and managing SPRS reporting to demonstrate ongoing adherence to federal requirements. The services are aimed at ensuring that the contractor’s information systems meet the security controls and compliance benchmarks necessary to handle CUI in accordance with Department of Defense standards. This subcontract falls under NAICS code 541611 and is associated with the Defense Logistics Agency under the Department of Defense. While specific geographic performance details are not provided, the work is intended to support defense-related operations requiring strict cybersecurity posture. The contract was posted in July 2026 and is structured as a subcontract, indicating it supports a larger prime contract or program focused on securing sensitive unclassified information within the defense supply chain.