Cybersecurity Compliance (CMMC Level 2 Support)

The contract requires comprehensive support to achieve CMMC Level 2 compliance for systems handling Controlled Unclassified Information, with specific focus on conducting a self-assessment against the CMMC framework, developing a detailed System Security Plan, and implementing safeguards for Covered Defense Information as mandated by DFARS 252.204-7012. The effort is oriented toward ensuring that the contractor's cybersecurity posture meets the Department of Defense’s standardized requirements for protecting sensitive data throughout its lifecycle, involving policies, procedures, and technical controls aligned with NIST SP 800-171. This is a subcontract under the Defense Logistics Agency, part of the Department of Defense, with the NAICS code 541611 indicating it falls under Management Consulting Services. The work is intended to support organizational readiness for CMMC certification, emphasizing documentation, risk management, and compliance validation rather than hardware or infrastructure procurement. While no specific location or point of contact is provided, the scope demands a structured approach to closing cybersecurity gaps and maintaining ongoing adherence to federal defense information security standards.