Cybersecurity Compliance Support (CMMC Level 2)

The contract supports CMMC Level 2 compliance for a subcontractor working under the Defense Logistics Agency, requiring full implementation of cybersecurity controls aligned with NIST SP 800-171 and DFARS 252.204-7012. It encompasses the development of a System Security Plan, a comprehensive assessment of existing controls against NIST standards, and the integration of required federal defense cybersecurity regulations into the contractor’s operating environment. The work is scoped to ensure the organization meets the Department of Defense’s maturity requirements for protecting controlled unclassified information. This subcontract, categorized under NAICS code 541512 for computer systems design services, is positioned within the broader DoD cybersecurity transformation initiative and will be performed at an unspecified location. The solicitation was posted in June 2026 and is tied to Contract SPEHA626C0002. Although no set-aside designation or point of contact is provided, the focus remains strictly on achieving and documenting compliance with CMMC Level 2, emphasizing documentation, risk mitigation, and audit readiness through structured security practices and formalized policies.