Cybersecurity Compliance (CMMC & NIST SP 800-171)

The contract requires full adherence to CMMC Level 2 and NIST SP 800-171 standards to protect covered defense information, encompassing comprehensive cybersecurity assessments, identification of compliance gaps, and targeted remediation efforts to meet required controls. Documentation support is critical throughout the process to ensure auditable records of policies, procedures, system configurations, and evidence of implemented safeguards. The work is performed as a subcontract under the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design services, and the performance location is not specified, suggesting the work may be conducted remotely or at multiple secure vendor sites. Compliance must be maintained continuously, with ongoing monitoring and reporting to uphold the integrity of defense information systems.