Cybersecurity Compliance and CMMC Level 2 Assessment Support

The contract entails providing comprehensive cybersecurity documentation and support to ensure that a media converter and its associated data meet the stringent requirements of CMMC Level 2, with a focus on alignment to NIST SP 800-171 controls. This includes conducting a thorough self-assessment of current cybersecurity practices, documenting compliance with all applicable security requirements, and developing and maintaining supply chain risk mitigation documentation to safeguard sensitive information throughout the procurement and operational lifecycle. The goal is to achieve full compliance with the Cybersecurity Maturity Model Certification framework to support Department of Defense operations and ensure secure handling of controlled unclassified information. This work is being performed as a subcontract under the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design services. The solicitation is posted as of June 26, 2026, and the performance location is not specified, implying the work may be conducted remotely or at various authorized sites. All deliverables must be meticulously prepared and validated to satisfy federal cybersecurity mandates, with particular emphasis on evidence-based documentation that can withstand audit scrutiny and demonstrate continuous adherence to CMMC Level 2 standards throughout the system’s deployment and maintenance phases.