Cybersecurity and CMMC Compliance Support

The contract supports Cybersecurity and CMMC Level 2 self-assessment and implementation of NIST SP 800-171 controls to safeguard Covered Defense Information. It is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, aimed at assisting organizations in achieving compliance with the Cybersecurity Maturity Model Certification framework at Level 2. The work involves evaluating current cybersecurity posture, identifying gaps against NIST SP 800-171 requirements, and implementing necessary technical and administrative safeguards to protect sensitive information transmitted or stored within defense supply chains. The effort is focused on ensuring alignment with federal cybersecurity standards for handling CDI, preparing the contractor for third-party assessment or self-certification under CMMC. The contract was posted on July 20, 2026, and is classified under NAICS code 541512, reflecting its alignment with computer systems design and related services. Performance location and direct point of contact details are not specified, but the obligation stems from a solicitation tracked through DLA’s DIBBS system under contract number SPE4AX26DP001.