Cybersecurity Compliance and CMMC Self-Assessment Support

This contract provides support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment and ensuring compliance with NIST Special Publication 800-171 for the handling of covered defense information as required by the Defense Federal Acquisition Regulation Supplement. The work is focused on enabling the contractor to meet federal cybersecurity standards mandated for organizations processing, storing, or transmitting sensitive defense data. The support includes assessing current security controls, identifying gaps, implementing necessary safeguards, and preparing documentation for self-certification under the CMMC framework. The contract is classified as a subcontract under the North American Industry Classification System code 541512, which pertains to computer systems design services. It is issued by the Defense Logistics Agency under the Department of Defense and is associated with the award contract SPE4A126G0001 and delivery order SPE4A526F7279. The performance location and point of contact details are not specified, but the scope is tied to defense information handling requirements and must align with all applicable DFARS regulations. The solicitation was posted in June 2026 and is intended to ensure the contractor maintains an adequate security posture to safeguard controlled unclassified information in nonfederal systems.