CMMC Level 2 Compliance and Cybersecurity Support

The contract involves providing specialized support to a prime contractor in achieving and maintaining CMMC Level 2 compliance, focusing on the development and implementation of system security plans, preparation for official audits, and active coordination with a certified third-party assessment organization. This effort is critical to ensuring the contractor meets the Department of Defense’s cybersecurity requirements for handling controlled unclassified information. The work encompasses a broad range of cybersecurity activities designed to establish robust, audit-ready controls aligned with NIST SP 800-171 and the CMMC framework, with an emphasis on continuous compliance and documentation integrity. This subcontract is issued under the Defense Logistics Agency, a component of the Department of Defense, and is classified under NAICS code 541618 for other scientific and technical consulting services. The task is tied to contract SPE8E526P1326 and is intended to support operational readiness in a defense supply chain context. The scope requires proactive collaboration with C3PAOs to navigate assessment processes and address findings, ensuring all security controls are not only implemented but also sustainably maintained. There is no specified location for performance, indicating the work may be conducted remotely or across multiple sites as needed by the prime contractor.