CMMC Level 2 Cybersecurity Compliance and Assessment Support

The contract provides comprehensive cybersecurity compliance support for achieving CMMC Level 2 certification, with a primary focus on aligning systems and processes with NIST SP 800-171 requirements for handling Controlled Unclassified Information. It includes the development and implementation of a System Security Plan and a Plan of Action and Milestones to document current security controls, identify gaps, and outline corrective actions necessary for compliance. The scope encompasses conducting self-assessments to evaluate readiness, addressing deficiencies, and ensuring ongoing adherence to federal cybersecurity standards applicable to Department of Defense contractors. This subcontract falls under NAICS code 541512, indicating its focus on computer systems design and related services, and is managed by the Defense Logistics Agency under the Department of Defense. The work supports the broader objective of securing CUI across the defense industrial base, requiring expertise in cybersecurity frameworks, documentation rigor, and remediation planning. The contract does not specify a place of performance or point of contact, suggesting the services may be delivered remotely or across multiple locations. The solicitation was posted in 2026, positioning this effort within the evolving timeline of CMMC implementation requirements.