Cybersecurity and CUI Compliance Support (NIST SP 800-171)

The contract supports subcontractor compliance with DFARS 252.204-7012 by ensuring full implementation of NIST SP 800-171 security requirements for handling Controlled Unclassified Information. It mandates the establishment of appropriate technical, administrative, and physical safeguards to protect CUI across all systems and environments associated with subcontracted activities. Compliance efforts include documentation, policy development, employee training, and continuous monitoring to meet federal cybersecurity standards. Additionally, the contract requires registration and maintenance of an accurate System for Award Management (SAM) and Supplier Performance Risk System (SPRS) profile, with timely updates to reflect cybersecurity posture and compliance status. The effort is scoped under NAICS code 541512 and is tied to a subcontract under the Defense Logistics Agency, Department of Defense, with performance expected to align with federal defense supply chain security requirements. All activities are governed by the need to demonstrate measurable adherence to NIST SP 800-171 controls and maintain audit readiness for compliance verification.