Export-Controlled Data Handling & Cybersecurity Compliance (CMMC Level 2)

The contract requires the provision of comprehensive cybersecurity and compliance services to ensure adherence to DFARS 252.204-7012, maintenance of CMMC Level 2 certification, and alignment with ITAR and EAR export control regulations as well as JCP requirements. The work centers on securing, managing, and mitigating risks associated with export-controlled technical data, implementing robust access controls, audit logging, incident response protocols, and continuous monitoring systems to meet federal defense standards. The contractor must demonstrate validated capabilities in protecting controlled unclassified information and maintaining compliance through documentation, employee training, third-party assessments, and system hardening aligned with NIST SP 800-171 and CMMC frameworks. This subcontract, issued under the Department of Defense through the Defense Logistics Agency, is tied to a specific contract identified by the number SPE4A726D0388 and is classified under NAICS code 541611 for management consulting services. The agreement demands ongoing operational compliance, not just initial certification, requiring active governance of security controls, timely reporting of breaches or system changes, and readiness for unannounced audits. The performance of services is expected to support U.S. national security interests by safeguarding sensitive defense-related information across the supply chain, and all activities must be conducted in strict accordance with federal mandates governing data handling, reporting, and international technology transfers.