CMMC Level 2 Self-Assessment and Cybersecurity Compliance

The contract requires the performance and ongoing maintenance of a CMMC Level 2 self-assessment to ensure compliance with cybersecurity standards for protecting Controlled Unclassified Information related to the design and manufacturing of aircraft components. This effort is critical for safeguarding sensitive data within the aerospace supply chain and aligns with Department of Defense requirements for handling CUI. The work is conducted under a subcontract tied to a Defense Logistics Agency acquisition and falls under NAICS code 541512, indicating it involves computer systems design and related services focused on cybersecurity implementation and assessment. The contractor must establish, document, and sustain a robust cybersecurity posture meeting all CMMC Level 2 controls, including access management, audit and accountability, incident response, and system and communications protection. Continuous compliance is mandatory, requiring regular monitoring, updates to security processes, and readiness for evaluations or audits. The contract does not specify a geographic location for performance, and while the solicitation date is listed as June 2026, the underlying award is linked to a previously executed DLA contract, suggesting this task is part of an existing obligations framework with ongoing compliance expectations.