Cybersecurity and CMMC Compliance Support

The contract seeks comprehensive cybersecurity support to implement NIST SP 800-171 controls and achieve readiness for a CMMC Level 2 assessment, specifically focused on protecting Covered Defense Information. This includes establishing, documenting, and sustaining the required security controls across systems handling CDI, ensuring alignment with federal cybersecurity standards, and preparing for an independent third-party evaluation. The effort also encompasses managing cyber incident reporting procedures in accordance with DFARS and CMMC requirements, ensuring timely detection, containment, analysis, and reporting of any security incidents involving CDI. All activities must be performed under the oversight of the Defense Logistics Agency as part of a subcontract within the Department of Defense’s broader cybersecurity compliance initiative, targeting organizations supporting defense operations with sensitive information.