Cybersecurity Compliance (CMMC Level 2)

The contract requires the maintenance of systems compliant with NIST SP 800-171 standards to safeguard Controlled Unclassified Information related to design and manufacturing data. This includes implementing and sustaining security controls across all relevant environments to ensure continuous alignment with federal cybersecurity requirements. The contractor must also support the self-assessment process for CMMC Level 2 certification, documenting and validating compliance measures to meet the Department of Defense’s cybersecurity maturity framework without external third-party evaluation. This action is classified as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and is tied to NAICS code 541512 for computer systems design services. The performance location and point of contact details are not specified, and the solicitation was posted on June 24, 2026, indicating a forward-looking procurement timeline. All activities must be executed to protect sensitive design and manufacturing information, ensuring that CUI remains secure throughout the system lifecycle and that any findings from the self-assessment are addressed promptly to maintain certification readiness.