Cybersecurity & Compliance Support (CMMC Readiness)

The contract seeks cybersecurity compliance support to prepare for CMMC Level 2 certification, including conducting a comprehensive NIST SP 800-171 gap analysis to identify areas where current controls fall short of required standards. The work will focus on ensuring the proper safeguarding of controlled unclassified information across all relevant systems and processes, aligning with Department of Defense requirements. This effort is structured to enable the contractor to achieve full readiness for CMMC Level 2 assessment, with an emphasis on documentation, policy implementation, and technical remediation of identified vulnerabilities. The task is issued as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 15, 2026, and is intended to support DLA’s broader mission of securing sensitive information within its supply chain and operational environment. Performance is expected to occur within the scope of DoD’s cybersecurity framework, with deliverables centered on compliance documentation, actionable remediation plans, and evidence of control implementation sufficient to pass a third-party CMMC assessment.