Cybersecurity Compliance and CMMC Implementation

The contract requires the implementation and ongoing maintenance of CMMC Level 1 or 2 cybersecurity controls to ensure compliance with Department of Defense standards. Key tasks include system hardening to reduce vulnerabilities, managing user access with strict authorization protocols, maintaining comprehensive audit logs for accountability, and submitting accurate SPRS reporting to demonstrate compliance posture. All work must align with the NIST SP 800-171 requirements as the baseline for CMMC Level 1 or 2, and the contractor is responsible for sustaining these controls throughout the performance period. This subcontract falls under the NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. The work is not tied to a specific geographic location, allowing performance across any authorized site. The contract was posted on July 15, 2026, and is accessed through the DIBBS platform with the award number SPE7L326P4815. Compliance is mandatory, and failure to meet the specified cybersecurity controls may result in contract termination or penalties.