Cybersecurity & Compliance Management (CDI/CMMC)

The contract titled Cybersecurity & Compliance Management (CDI/CMMC) is a subcontract under the Defense Logistics Agency within the Department of Defense, requiring full adherence to NIST SP 800-171 and CMMC Level 2 cybersecurity standards for handling Covered Defense Information. All systems, processes, and personnel involved must implement the required safeguards to protect CDI from unauthorized access, disclosure, or compromise, ensuring end-to-end compliance with federal cybersecurity requirements. The contract emphasizes continuous monitoring, risk mitigation, and documentation of security controls to maintain certification and operational readiness. The solicitation is classified under NAICS code 541512, indicating it pertains to computer systems design services, and was posted on July 31, 2026. Performance location and point of contact details are unspecified, but compliance obligations apply regardless of physical or virtual infrastructure used. The contract is linked to the DIBBS system under award number SPE7L326P5206, and all parties must ensure data integrity, audit readiness, and alignment with DoD cybersecurity frameworks throughout the contract lifecycle.