Cybersecurity Compliance Support (CMMC Level 2)

The contract supports cybersecurity compliance efforts for CMMC Level 2 certification and adherence to NIST SP 800-171 standards, specifically aimed at securing Covered Defense Information. It focuses on providing the necessary services to conduct a self-assessment of cybersecurity controls, identify gaps, and implement corrective actions to meet federal requirements for handling sensitive defense data. The scope includes guidance on documentation, policy development, system hardening, and continuous monitoring to ensure ongoing compliance within a defense contractor environment. This is a subcontract under the Department of Defense, managed by the Defense Logistics Agency, and falls under NAICS code 541512 for computer systems design services. The work is intended to enhance the cybersecurity posture of organizations handling CDI and is tied to a broader government initiative to enforce the Cybersecurity Maturity Model Certification framework. Performance of the contract is expected to align with DoD mandates, though no specific location is designated for performance. The solicitation was posted in June 2026 and is linked to a broader award under contract SPE4A125G0009.