NIST SP 800-171 / CMMC Level 2 Compliance Support

The contract supports the prime contractor in achieving and maintaining compliance with NIST SP 800-171 standards as required by DFARS 252.204-7012, focusing on the development and maintenance of critical documentation including the System Security Plan and Plan of Action and Milestones. The work involves implementing and documenting controls to safeguard controlled unclassified information within nonfederal systems, aligning with the cybersecurity requirements set forth by the Department of Defense. This subcontract is tied to the broader goal of advancing toward CMMC Level 2 certification, ensuring that all security practices meet the baseline for protecting sensitive defense information across the supply chain. The task is performed under the Defense Logistics Agency as the overseeing agency within the Department of Defense, with a NAICS code of 541512 indicating information technology services and cybersecurity consulting. Although specific performance locations and points of contact are not listed, the engagement is structured to deliver compliance readiness through systematic documentation, risk assessment, and continuous monitoring of security controls. The solicitation was posted in June 2026, signaling a forward-looking procurement with an immediate emphasis on strengthening cybersecurity posture for contractors handling defense-related data.