Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information, ensuring alignment with the Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012. This includes establishing robust cyber incident reporting procedures to meet federal requirements for timely disclosure of security breaches involving sensitive defense data. The work must support compliance at the Cybersecurity Maturity Model Certification Level 2 standard, which demands a structured approach to cybersecurity readiness, documentation, and continuous monitoring across the organization’s information systems. The effort is classified as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code for computer systems design and related services. Performance is expected to be carried out in support of federal defense operations, with no geographic restrictions specified.