CMMC Level 2 Cybersecurity Compliance Support

The contract focuses on providing comprehensive support to achieve CMMC Level 2 cybersecurity compliance for entities handling Controlled Unclassified Information under DFARS 252.204-7012. This includes conducting a detailed self-assessment against the NIST SP 800-171 security requirements, identifying gaps in current security controls, and developing a comprehensive Plan of Action and Milestones to address deficiencies. Documentation required to demonstrate adherence to CMMC Level 2 standards will be prepared and organized, ensuring alignment with Department of Defense standards for supply chain cybersecurity. The work is structured as a subcontract under the Defense Logistics Agency, operating within the broader Department of Defense framework. The North American Industry Classification System code 541512 indicates the services fall under computer systems design and related activities. The contract is not subject to a specific set-aside designation and is intended to support organizations transitioning toward or maintaining CMMC Level 2 certification. Although the place of performance and point of contact details are unspecified, the work is expected to be performed remotely or at the prime contractor's location, with deliverables centered on compliance documentation and remediation planning rather than on-site technical implementation.