Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Controlled Unclassified Information handled by the contractor. This includes establishing technical, administrative, and physical safeguards aligned with the NIST framework to ensure the confidentiality, integrity, and availability of CDI. The contractor must also perform a self-assessment to determine compliance with the Cybersecurity Maturity Model Certification Level 2 requirements, documenting findings and addressing gaps to meet the standard without external audit. Additionally, the contractor is responsible for managing cyber incident reporting protocols, ensuring timely detection, reporting, and response to any potential security breaches involving CDI in accordance with federal and DoD obligations. The work is performed under a subcontract for the Defense Logistics Agency, with the NAICS code 541512 indicating information technology consulting services, and the solicitation is listed as active with a posted date of July 14, 2026.