Cybersecurity & Controlled Information Safeguarding (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in full alignment with the Cybersecurity Maturity Model Certification Level 2 and NIST Special Publication 800-171 standards. This subcontract is designated under NAICS code 541512 and falls under the purview of the Defense Logistics Agency within the Department of Defense, with performance expected to occur across unspecified locations. The provider must establish a robust, compliant cybersecurity framework that ensures the confidentiality, integrity, and availability of sensitive information, addressing all required controls outlined in the referenced NIST guidelines and CMMC Level 2 requirements. Continuous monitoring, documentation, and readiness for assessment are essential to sustain compliance throughout the contract lifecycle.