CMMC Level 2 Compliance and Cybersecurity Support

The contract requires comprehensive third-party assessment and support to achieve CMMC Level 2 compliance and support the implementation of NIST SP 800-171 controls for contractor information systems, ensuring full alignment with Department of Defense cybersecurity standards. The scope includes evaluating existing security practices, identifying gaps against CMMC Level 2 requirements, and delivering actionable remediation guidance to strengthen the contractor’s cyber posture across all relevant domains and controls outlined in the NIST framework. This subcontract, issued by the Defense Logistics Agency under NAICS code 541512, is focused on enabling contractors to meet the mandatory cybersecurity benchmarks mandated by the DoD for handling controlled unclassified information. The solicitation is open for responses until July 27, 2026, with no specified set-aside classification, and performance is expected to be conducted wherever the contractor’s information systems are operated, without restriction to a specific geographic location. The work will involve ongoing collaboration with the contractor team to document compliance, prepare for assessment, and maintain readiness for third-party audit execution in accordance with CMMC Accreditation Body protocols.