Cybersecurity Compliance Support (CMMC Level 2)

This contract provides support for implementing Cybersecurity Maturity Model Certification Level 2 and DFARS 252.204-7012 requirements to safeguard covered defense information within the defense supply chain. The work focuses on helping subcontractors meet rigorous federal cybersecurity standards by establishing, documenting, and maintaining the necessary controls and processes to ensure compliance with the Department of Defense’s cybersecurity frameworks. The scope includes assessing current security postures, identifying gaps, remediation planning, policy development, employee training, and continuous monitoring to sustain compliance over time. The contract is classified as a subcontract under the NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency on behalf of the Department of Defense. It is scheduled for posting on June 24, 2026, and involves performance under the contractual obligations of the broader DLA contract SPE7L026V1343. While specific geographic performance locations are not defined, the implementation efforts are targeted at organizations handling covered defense information and must align with federal mandates governing the protection of sensitive DoD data. No set-aside classification is specified, indicating it may be open to all eligible small and large businesses capable of delivering the required cybersecurity compliance services.