Cybersecurity Compliance (NIST SP 800-171 and CMMC Level 2)

This contract requires the implementation and attestation of cybersecurity controls to safeguard Controlled Unclassified Information in alignment with NIST SP 800-171 and CMMC Level 2 standards. The work involves establishing, validating, and documenting technical and administrative safeguards to meet federal requirements for protecting sensitive government data, ensuring full compliance through formal attestation processes. The subcontractor must demonstrate operational readiness and continuous adherence to these cybersecurity frameworks across all systems handling CUI. The contract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. It is classified as a subcontract with no set-asides specified, and performance is expected to occur without a defined physical location, indicating potential remote or distributed operations. The solicitation was posted in July 2026 and is accessible via the DIBBS system under contract number SPE7L126V096S. Compliance with these controls is mandatory for maintaining eligibility to process, store, or transmit CUI under DOD contractual obligations.