Cybersecurity Compliance and CMMC Support

This contract mandates support for achieving Cybersecurity Maturity Model Certification Level 2 compliance and ensuring adherence to DFARS 252.204-7012 requirements for the handling of Covered Defense Information. The work involves performing a self-assessment of cybersecurity practices, identifying gaps in current controls, and implementing necessary measures to meet the mandated security standards. The subcontractor is tasked with documenting compliance evidence, aligning with NIST SP 800-171 controls, and maintaining ongoing readiness for audit or assessment by Department of Defense entities. The effort is critical to safeguarding sensitive defense data throughout the supply chain and ensuring operational continuity under federal cybersecurity mandates. The contract is issued under the Defense Logistics Agency as part of the Department of Defense’s broader initiative to enforce cybersecurity standards across its subcontracting network. The North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services, emphasizing a technical consulting and implementation focus. Performance is expected to align with federal cybersecurity timelines and protocols, though specific geographic locations for performance are not detailed. The subcontractor must operate with full awareness of the security and reporting obligations tied to handling Covered Defense Information, ensuring all systems, processes, and personnel meet the required maturity level without reliance on third-party certification until internally validated through self-assessment.