Cybersecurity Compliance (CMMC Level 2 Self-Assessment)

The contract requires the successful completion and ongoing maintenance of a CMMC Level 2 self-assessment to ensure full compliance with NIST SP 800-171 standards for the protection of covered defense information. This obligation centers on implementing and sustaining the necessary cybersecurity controls to safeguard sensitive government data processed or stored by the contractor. The work is performed as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512 for computer systems design services, indicating that the scope likely involves technology-driven cybersecurity efforts. The contractor must remain fully compliant with all CMMC Level 2 requirements throughout the contract term, including documentation, policy enforcement, and periodic review to maintain certification posture. The place of performance and specific location details are not explicitly defined, suggesting flexibility in where the work is conducted, but the responsibility to adhere to federal cybersecurity mandates remains absolute regardless of geographic location.