Cybersecurity Compliance & CMMC Implementation Support

This contract provides comprehensive support for implementing NIST SP 800-171 security requirements, preparing for a CMMC Level 2 self-assessment, and ensuring proper cyber incident reporting in alignment with DFARS 252.204-7012. The work is focused on helping subcontractors meet critical Department of Defense cybersecurity standards by establishing, documenting, and maintaining the necessary controls and protocols to protect controlled unclassified information. The scope includes guidance on policy development, system hardening, employee training, and audit readiness to achieve CMMC Level 2 certification, with an emphasis on continuous compliance and timely reporting of cybersecurity incidents as mandated by federal regulations. The contract is categorized as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services. It is issued by the Defense Logistics Agency under the Department of Defense and will be performed in support of DLA’s cybersecurity compliance initiatives. While no specific location is designated for performance, the services are required to align with federal cybersecurity frameworks and will be tailored to the contractor’s environment. This effort ensures that all parties handling sensitive defense information meet the minimum security posture required to safeguard national defense data and remain eligible for future DoD contracting opportunities.