Cybersecurity Compliance (CMMC Level 2)

The contract requires adherence to CMMC Level 2 and NIST SP 800-171 cybersecurity standards for all IT systems handling covered defense information, ensuring robust protection of sensitive data across the supply chain. This includes implementing necessary technical, operational, and managerial safeguards, as well as providing comprehensive documentation and assessment support to demonstrate compliance with these federal requirements. The scope is focused on maintaining a secure information environment aligned with Department of Defense mandates, with the obligation to perform all activities in support of the Defense Logistics Agency under subcontract arrangement. All compliance efforts must be fully documented and verifiable, with assessments conducted to validate the effectiveness of implemented controls. The work falls under NAICS code 541512, indicating it involves computer systems design and related services, and is expected to be executed as part of a broader defense infrastructure initiative. No specific point of contact or geographic performance location is designated, suggesting flexibility in execution as long as the cybersecurity objectives are met in alignment with the broader DOD framework.