Cybersecurity & CMMC Compliance

This contract requires the implementation of NIST SP 800-171 security controls to protect controlled unclassified information handled by covered systems, along with the development of a comprehensive System Security Plan that documents how these controls are applied and maintained. The contractor must achieve CMMC certification at the appropriate level to demonstrate compliance with Department of Defense cybersecurity requirements, ensuring that both technical and procedural safeguards meet federal standards for safeguarding CUI. Ongoing cyber incident reporting is mandatory, necessitating timely detection, response, and notification of any security events affecting the system, in alignment with DOD reporting protocols. The work falls under NAICS code 541512 and is structured as a subcontract within the broader Defense Logistics Agency framework, supporting Department of Defense information systems that handle sensitive data.