Cybersecurity Compliance (CMMC Level 2 Implementation)

This contract requires the implementation and documentation of CMMC Level 2 cybersecurity controls for systems that handle Covered Defense Information, ensuring full alignment with the required standards for protecting sensitive defense data. The work involves developing and formalizing security policies, procedures, and documentation necessary to meet CMMC Level 2 requirements, with the ultimate goal of achieving audit readiness and demonstrating compliance to federal oversight bodies. All deliverables must be thoroughly documented and structured to withstand rigorous third-party assessment. The contract is structured as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with a NAICS code of 541512 indicating it falls under Computer Systems Design Services. The solicitation was posted on May 31, 2026, and proposals must be submitted by June 11, 2026. The performance location is not specified, but the scope is focused on securing systems that process CDI, requiring the contractor to have expertise in cybersecurity frameworks, documentation rigor, and defense compliance environments. There is no set-aside designation applied, and the contract will be awarded through the DIBBS platform.