Cybersecurity & CMMC Compliance Support

The contract supports the implementation and documentation of NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) controls to safeguard Controlled Unclassified Information and Federal Contract Information as required under DFARS 252.204-7012. This effort is focused on ensuring full compliance with Department of Defense cybersecurity standards across all relevant systems and processes, with particular attention to the secure handling, storage, and transmission of sensitive data. The work involves assessing current security postures, identifying gaps, developing policies and procedures, and formally documenting control implementation to meet CMMC certification levels necessary for continued contract performance. This subcontract is positioned under the NAICS code 541512 for Computer Systems Design Services and is associated with the Defense Logistics Agency under the Department of Defense. It is intended to be performed in support of defense contracting obligations, though the specific place of performance is not detailed. The solicitation was posted in July 2026 and is accessible through the DIBBS system under contract number SPE7M826P2099. The scope demands a rigorous, audit-ready approach to cybersecurity compliance, requiring technical expertise in federal cybersecurity frameworks and the ability to interface with DoD requirements without direct oversight from the contracting office.