Cybersecurity Compliance (CMMC Level 2) Support

The contract provides comprehensive support for achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, with a focus on aligning systems and practices with the controls outlined in NIST Special Publication 800-171. This includes implementing system hardening measures to secure covered defense information, conducting a thorough self-assessment of current cybersecurity postures, and developing complete documentation that demonstrates adherence to required safeguards. The scope is centered on enabling organizations to meet federal standards for protecting sensitive data within the defense industrial base. This subcontract, issued under the Department of Defense’s Defense Logistics Agency, targets contractors needing to fulfill CMMC Level 2 requirements through technical guidance and procedural alignment. The work is tied to the NAICS code 541512, indicating it falls under the category of computer systems design services, and is expected to support entities handling controlled unclassified information. The contract remains active under the procurement reference SPE4A122G0005 and SPE4A726F8765, with performance obligations likely spanning multiple locations across the defense supply chain, though no specific place of performance is detailed.