Cybersecurity & CMMC Compliance Support

The contract seeks support to achieve CMMC Level 2 certification by assessing existing systems, documenting compliance with NIST SP 800-171 security controls, and implementing necessary remediations to safeguard Covered Defense Information. This effort is critical for ensuring that all required cybersecurity practices are properly applied, validated, and maintained to meet Department of Defense standards for handling sensitive information. The work involves a thorough review of technical and administrative controls across infrastructure, policies, and procedures to close gaps and establish a robust compliance posture. This subcontract is being managed under the Defense Logistics Agency, with performance located at FPO, ZIP 09523, and is tied to NAICS code 541512 for computer systems design services. The solicitation was posted on July 24, 2026, with a response deadline of July 29, 2026, indicating a tight turnaround for qualified vendors to submit proposals. The focus is on deliverables that directly contribute to certification readiness, requiring demonstrated expertise in CMMC frameworks, NIST guidelines, and defense sector compliance requirements.