Cybersecurity Compliance (CMMC Level 2 Assessment & Maintenance)

The contract requires the provision and ongoing maintenance of CMMC Level 2 compliance for a prime contractor operating under the Department of Defense, specifically for the Defense Logistics Agency. This includes conducting a comprehensive system assessment to verify adherence to the security controls outlined in NIST SP 800-171, preparing and submitting all necessary documentation to demonstrate compliance, and establishing procedures for timely cyber incident reporting in accordance with federal requirements. The work entails continuous monitoring and improvement of cybersecurity practices to sustain CMMC Level 2 certification, ensuring that all systems and processes meet the designated standards for protecting controlled unclassified information. This subcontract is tied to contract SPE7L7L26P2720 and falls under NAICS code 541512, which classifies it as computer systems design and related services. The requirement is active as of June 16, 2026, and performance is expected to align with the defense supply chain’s cybersecurity expectations. The contractor must maintain rigorous controls over information systems, respond to security events promptly, and demonstrate auditable compliance through consistent documentation and reporting mechanisms. There is no specified set-aside or geographic limitation, indicating the work may be performed remotely or at any location supporting the prime contractor’s operations under the Department of Defense’s cyber resilience framework.