Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

The contract requires implementation and assessment of cybersecurity compliance with NIST SP 800-171 and CMMC Level 2 standards to safeguard controlled unclassified information within contractor systems. The scope centers on ensuring all technical, administrative, and physical safeguards are properly configured and documented to meet federal requirements for protecting CUI, with particular emphasis on systems used by subcontractors supporting defense logistics operations. Compliance must be verified through formal assessments that demonstrate alignment with the 110 security controls outlined in NIST SP 800-171 and the additional requirements specified under CMMC Level 2, including third-party validation where applicable. This is a subcontract under the Department of Defense, managed by the Defense Logistics Agency, with performance location identified as FPO 96678. The solicitation was posted on July 28, 2026, and responses are due by August 10, 2026. The North American Industry Classification System code 541512 indicates this falls under computer systems design and related services, requiring contractors to have demonstrated expertise in cybersecurity frameworks and compliance documentation. Successful bidders must possess the capability to conduct gap analyses, deploy necessary controls, maintain ongoing compliance, and produce evidence for audit readiness, ensuring all CUI is handled in accordance with DoD cybersecurity mandates.