CMMC Level 2 Cybersecurity Compliance Support

This contract provides comprehensive support for achieving and maintaining CMMC Level 2 compliance, specifically focused on the handling of controlled unclassified information related to design and manufacturing processes. The work involves implementing and sustaining a full suite of system security controls, generating necessary documentation, conducting internal self-assessments, and ensuring full audit readiness to meet Department of Defense requirements for safeguarding sensitive data. The effort is aligned with the NIST SP 800-171 standards and is designed to enable the contractor to operate in a regulated environment where CUI must be protected against cyber threats. The contract is structured as a subcontract under the Defense Logistics Agency, part of the Department of Defense, with a NAICS code of 541512 indicating it falls under computer systems design services. While no place of performance or point of contact is specified, the scope implies a focus on integrating cybersecurity practices into existing design and manufacturing workflows. Compliance activities must be sustained over time, requiring continuous monitoring, documentation updates, and readiness for third-party assessments to validate adherence to CMMC Level 2 controls. The agreement does not include a set-aside designation and is available through the DIBBS procurement portal under the referenced contract and delivery identifiers.