Cybersecurity Compliance (CMMC Level 2 Support)

This contract supports cybersecurity compliance for systems handling covered defense information by providing expertise in CMMC Level 2 self-assessment, alignment with NIST SP 800-171 requirements, and adherence to DFARS 252.204-7012. The work focuses on ensuring that all technical, operational, and administrative controls necessary for protecting controlled unclassified information are properly implemented, documented, and validated according to Department of Defense standards. The subcontractor will assist in preparing organizations for third-party assessments by conducting gap analyses, developing compliance policies, training personnel, and maintaining audit-ready documentation throughout the compliance lifecycle. The effort is scoped under NAICS code 541512 for computer systems design services and falls under the broader cybersecurity initiatives of the Defense Logistics Agency within the Department of Defense. Although the place of performance and point of contact details are not specified, the contract is positioned as a subcontract with no set-aside classification, suggesting it is open to any qualified vendor. The solicitation was posted in June 2026, indicating the work is anticipated to begin in the near term and will be critical in enabling defense contractors to meet mandatory CMMC Level 2 requirements for accessing sensitive defense information.