Cybersecurity Compliance and Reporting (CMMC Level 2)

The contract entails the implementation of cybersecurity measures and the completion of a self-assessment to achieve CMMC Level 2 compliance, ensuring the proper safeguarding of covered defense information. This includes adhering to NIST SP 800-171 controls and submitting the required Supplier Performance Risk System (SPRS) score to demonstrate compliance. The work is performed as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. The focus is on establishing, documenting, and maintaining a robust cybersecurity posture that meets federal requirements for handling sensitive defense data, with all activities conducted in alignment with CMMC framework standards.