Cybersecurity Compliance (CMMC and DFARS 252.204-7021)

The contract requires prime and subcontractors to comply with cybersecurity standards mandated for protected defense information under DFARS 252.204-7021 and the Cybersecurity Maturity Model Certification framework at Levels 1 and 2. All parties must implement the basic safeguarding controls outlined in NIST SP 800-171 to ensure the protection of controlled unclassified information handled in support of Department of Defense contracts. Compliance is a condition of performance, and failure to meet these requirements may result in contract non-compliance or termination. The contract falls under NAICS code 541512 for computer systems design services and is administered by the Defense Logistics Agency under the Department of Defense. Performance is expected across locations managed by the agency, with no specific geographic restrictions outlined. The subcontract is part of a larger award under contract SPE7LX26D0028, issued on July 16, 2026, and all parties must maintain documentation and demonstrate ongoing adherence to the required cybersecurity controls throughout the contract lifecycle.