Cybersecurity Compliance Assessment (NIST SP 800-171 & CMMC Level 2)

The contract requires performing a thorough cybersecurity assessment to ensure compliance with NIST SP 800-171 Revision 1 and CMMC Level 2 standards. The primary objective is to identify any security control deficiencies and assist in meeting the DFARS 252.204-7012 requirements regarding the protection of Controlled Unclassified Information (CUI). The assessment results must be documented and delivered through the Supplier Performance Risk System (SPRS). Issued by the Defense Logistics Agency under the Department of Defense, this subcontract focuses on cybersecurity compliance with a solicitation response deadline of June 3, 2026. The work is to be performed in Mechanicsburg, ZIP code 17055, under NAICS code 541611, which pertains to management consulting services. This contract supports the Department of Defense’s efforts to enhance cybersecurity posture within its supply chain and provides critical validation for contractors managing sensitive information.