Cybersecurity Compliance (CMMC Level 2)

This contract supports the Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment and the implementation of National Institute of Standards and Technology Special Publication 800-171 cybersecurity practices for handling covered defense information. It is a subcontract under the Defense Logistics Agency, part of the Department of Defense, and is focused on ensuring that contractors meet the required security controls to protect sensitive information within the defense supply chain. The effort centers on aligning organizational policies, procedures, and technical safeguards with NIST SP 800-171 requirements to achieve CMMC Level 2 compliance, which includes implementing 110 security controls across 14 families such as access control, audit and accountability, and system and communications protection. The work is aimed at organizations that handle controlled unclassified information and must demonstrate a validated level of cybersecurity readiness to continue supporting defense contracts. The contract is classified as a subcontract with a NAICS code of 541512, indicating it falls under the category of computer systems design and related services. It was posted on July 21, 2026, and is associated with the contract award SPE4AX26DP002 and delivery order SPE4AX26F295E. Performance location details are not specified, and no set-aside provisions or point of contact information are provided. The scope requires active engagement in conducting internal assessments, documenting compliance, remediating gaps, and preparing for potential third-party audits. Success requires thorough understanding of CMMC framework requirements and the ability to integrate cybersecurity practices into existing operational workflows without disrupting mission-critical functions.