Cybersecurity Compliance (CMMC Level 2)

The contract requires the provision of comprehensive Cybersecurity Maturity Model Certification (CMMC) Level 2 services aimed at achieving compliance with DFARS 252.204-7012. This includes conducting a detailed gap analysis to identify deficiencies in current cybersecurity practices relative to CMMC Level 2 requirements, developing and organizing the necessary documentation to demonstrate alignment with the framework, and actively coordinating with an authorized C3PAO to facilitate the official certification process. The work is scoped to ensure all technical, procedural, and administrative controls mandated by the regulation are properly implemented and validated. This subcontract is issued by the Defense Logistics Agency under the Department of Defense and is classified under NAICS code 541611, indicating it pertains to management consulting services focused on cybersecurity compliance. The solicitation was posted on July 21, 2026, with responses due by August 4, 2026. There is no specified set-aside designation, and the place of performance is not defined, which suggests the work may be performed remotely or at the contractor’s location. The contractor must be prepared to deliver full-cycle support from assessment through certification, ensuring the end recipient meets federal cybersecurity obligations for handling controlled unclassified information.