Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and self-assessment of cybersecurity controls aligned with the Cybersecurity Maturity Model Certification (CMMC) Level 2 standard to safeguard controlled unclassified information (CUI) throughout the performance of the subcontract. This effort is mandatory for ensuring compliance with Department of Defense cybersecurity requirements and involves establishing, documenting, and maintaining a robust cybersecurity framework that meets the specified controls for protecting CUI during execution. The contractor must conduct a thorough self-assessment to validate adherence to these controls and be prepared to demonstrate compliance upon request. This subcontract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. The work is tied to a specific delivery order under the contract number SPE4A626F5890 and is expected to be performed in support of broader DLA initiatives. While no specific location of performance is listed, the obligation to achieve CMMC Level 2 compliance is binding and must be completed to maintain eligibility for continued contract performance. Failure to meet these cybersecurity requirements could result in contract termination or loss of access to CUI.