CMMC Level 2 Cybersecurity Compliance Support

The contract seeks support to achieve CMMC Level 2 and NIST SP 800-171 compliance for the handling of Controlled Unclassified Information, requiring a comprehensive gap assessment to identify current cybersecurity deficiencies, followed by detailed documentation of policies, procedures, and control implementations. The effort includes actionable implementation support to close identified gaps and establish a sustainable compliance posture aligned with federal standards, ensuring the organization can properly safeguard sensitive information within its systems and operations. This work is critical for maintaining eligibility to process, store, or transmit Controlled Unclassified Information under Department of Defense requirements. The task is structured as a subcontract under the Defense Logistics Agency, classified under NAICS code 541512 for Computer Systems Design Services, and is targeted at providing specialized cybersecurity expertise rather than hardware or infrastructure procurement. The solicitation was posted in June 2026, indicating the work is planned for future execution, and performance is expected to occur without a specified geographic location, suggesting flexibility in execution method including remote or on-site support as needed by the contracting entity. The scope emphasizes operational readiness through compliance, not just documentation, demanding practical integration of controls into existing workflows and systems.