Cybersecurity Compliance (CMMC Level 2)

The contract requires support for achieving and maintaining CMMC Level 2 compliance to safeguard Controlled Unclassified Information within defense systems. This involves conducting comprehensive system assessments, developing and implementing security policies, enforcing strict access controls, establishing robust incident response protocols, and preparing detailed self-assessment reports that demonstrate alignment with CMMC requirements. All activities must be executed to meet the Department of Defense’s cybersecurity standards for subcontractors handling sensitive unclassified data. The effort is positioned as a subcontract under the Defense Logistics Agency, with performance occurring at FPO 96675. The solicitation was posted on July 20, 2026, and responses are due by July 31, 2026. It falls under NAICS code 541512, indicating it is related to computer systems design and related services. There is no set-aside designation specified, and the contract does not include a designated point of contact, requiring proposers to reference the provided DIBBS link for additional details and submission procedures.