Cybersecurity Compliance (CMMC Assessment)

The contract seeks a third-party vendor to perform a Cybersecurity Maturity Model Certification (CMMC) Level 2 assessment to verify compliance with NIST Special Publication 800-171 for the handling of Controlled Unclassified Information (CUI) in accordance with Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The assessment must evaluate the contractor’s cybersecurity practices and processes to ensure they meet the necessary standards for protecting sensitive government data, with the goal of achieving formal CMMC Level 2 certification. This subcontract is part of a broader effort by the Defense Logistics Agency under the Department of Defense to enforce robust cybersecurity controls across its supply chain. The solicitation was posted on August 5, 2026, with a response deadline of August 17, 2026, and is classified under NAICS code 541612, which corresponds to management consulting services, indicating the assessment is treated as a professional technical service. The place of performance and point of contact details are not specified, suggesting the assessment may be conducted remotely or at the vendor’s facility. The contract is issued through the DIBBS platform, reflecting its formal procurement process under defense contracting regulations. Successful bidders must demonstrate expertise in CMMC Level 2 requirements, experience in NIST 800-171 audits, and the ability to produce audit-ready documentation and certification outcomes acceptable to the Department of Defense.