Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of CMMC Level 2 cybersecurity controls to safeguard Controlled Unclassified Information in alignment with DFARS requirements and NIST SP 800-171 standards. This subcontract is focused on ensuring robust information security practices are established and sustained across all systems handling CUI, with emphasis on access control, configuration management, identification and authentication, incident response, and continuous monitoring. The work is performed under the purview of the Defense Logistics Agency, a branch of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. The contract remains active through its performance period beginning in 2026, with no specific set-aside provisions indicated. While details on location or point of contact are not provided, performance is expected to support DLA’s mission-critical infrastructure and supply chain systems. All activities must adhere strictly to federal cybersecurity frameworks and demonstrate compliance through documented policies, technical safeguards, and audit-ready controls to meet CMMC Level 2 certification requirements, ensuring uninterrupted access to defense-related data and systems.