Cybersecurity Compliance (CMMC Level 2 Implementation)

The contract focuses on implementing and assessing cybersecurity controls to achieve CMMC Level 2 compliance for systems that handle controlled unclassified information in accordance with NIST SP 800-171 requirements. This effort is critical for ensuring the protection of sensitive government data and requires a thorough alignment of technical, operational, and administrative controls across all relevant systems and processes. The successful contractor must demonstrate expertise in evaluating existing security postures, identifying gaps, deploying compliant controls, and documenting evidence to support third-party assessment readiness. This subcontract is issued by the Defense Logistics Agency under the Department of Defense, with performance location in Mechanicsburg, Pennsylvania, and is classified under NAICS code 541512 for computer systems design services. Interested parties must submit responses by the deadline of July 6, 2026, with the opportunity to respond via the DIBBS platform. The effort demands a structured approach to continuous compliance, including policy updates, employee training, access controls, incident response preparedness, and regular audits to maintain adherence to CMMC Level 2 standards throughout the contract lifecycle.