Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation of NIST SP 800-171 security controls and achievement of CMMC Level 2 certification to safeguard Controlled Unclassified Information within contractor systems. This effort is critical for ensuring that all applicable cybersecurity requirements are met to protect sensitive defense-related data handled by the subcontractor on behalf of the Defense Logistics Agency under the Department of Defense. Compliance must be fully operationalized across all relevant systems, processes, and personnel involved in the performance of the subcontract, with emphasis on access control, data encryption, audit logging, incident response, and workforce training consistent with CMMC Level 2 standards. The contract is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design and related services. It was posted on July 14, 2026, and is tied to the award ID SPE7M026V4681, with performance scope likely extending across multiple locations, though specific geographic details are not provided. The subcontractor is obligated to maintain documented policies, conduct regular assessments, and sustain continuous compliance with CMMC Level 2 requirements throughout the contract term, with potential audits or third-party evaluations to verify adherence. Failure to maintain compliance may result in contract termination or loss of access to CUI, making cybersecurity readiness a central condition of performance.