Cybersecurity and Compliance Documentation (CMMC Level 2)

The contract requires the execution and documentation of a CMMC Level 2 self-assessment to verify alignment with the cybersecurity requirements outlined in DFARS 252.204-7012 and NIST SP 800-171, specifically focused on the handling of covered defense information. This effort is critical for ensuring that systems, processes, and controls meet the mandatory standards for protecting sensitive federal data within the defense supply chain. The work must be thoroughly documented to demonstrate compliance, with all findings, remediation actions, and supporting evidence maintained for potential audit or review. This subcontract is issued under the Defense Logistics Agency within the Department of Defense and falls under the NAICS code 541512 for computer systems design services. The performance of this task is tied to contractual obligations related to cybersecurity posture and defense contractor requirements, though specific location details for performance are not provided. The solicitation was posted in June 2026 and is accessible through the DIBBS platform, indicating its formal placement within the DOD acquisition framework. Completion of this assessment is non-negotiable for maintaining eligibility to handle controlled unclassified information and sustaining contractual relationships with defense agencies.