Cybersecurity & CMMC Level 2 Compliance Support

The contract supports the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls for systems that process, store, or transmit controlled unclassified information and export-controlled data. This effort is mandated to ensure compliance with Department of Defense cybersecurity requirements and to safeguard sensitive information against evolving threats. The work is performed under a subcontract arrangement with the Defense Logistics Agency, a component of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services, indicating a focus on technical integration and cybersecurity architecture. The contract requires adherence to all CMMC Level 2 practices, including access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. Performance is tied to sustaining continuous compliance through proactive monitoring, documentation, vulnerability management, and workforce training. The system must remain secure throughout its lifecycle, with any updates or changes to infrastructure or data handling procedures requiring immediate alignment with CMMC standards. Although no specific location is designated, performance is expected to align with DLA’s operational needs and federal cybersecurity directives, with ongoing accountability for audit readiness and compliance validation.