Cybersecurity Compliance & CMMC Level 2 Self-Assessment Support

The contract provides support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance and ensuring the proper safeguarding of Covered Defense Information (CDI) in accordance with DFARS clause 252.204-7012. It focuses on enabling subcontractors to meet the required cybersecurity standards by offering guidance, documentation, and assessment support necessary to align with CMMC Level 2 controls, which include implementing security practices across access control, awareness and training, audit and accountability, configuration management, identification and authentication, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The effort is designed to help organizations demonstrate readiness for CMMC certification through a structured self-assessment process and compliance validation. This subcontract falls under NAICS code 541612 for Management Consulting Services and is issued by the Defense Logistics Agency, part of the Department of Defense, to support defense supply chain cybersecurity resilience. The work is intended to ensure that all Covered Defense Information is protected against unauthorized access, disclosure, and compromise, in line with federal mandates. While the place of performance and point of contact details are not specified, participation requires adherence to DoD cybersecurity requirements and the ability to conduct internal assessments, implement corrective actions, and maintain documentation for potential audits. The contract is open for bids as of June 24, 2026, and is structured to serve entities within the defense industrial base seeking to meet CMMC Level 2 requirements as a condition for continued participation in Department of Defense contracts.