Cybersecurity & NIST SP 800-171 Compliance Support

The contract requires comprehensive cybersecurity services to ensure compliance with NIST SP 800-171 standards for protecting Controlled Unclassified Information within the prime contractor’s systems. This includes conducting a thorough assessment of current security controls, identifying gaps, implementing necessary remediation measures to meet federal requirements, and preparing and submitting the System Security Plan Rating System score to the Supplier Performance Risk System. The work is performed under a subcontract supporting the Department of Defense through the Defense Logistics Agency, with a focus on safeguarding CUI across all relevant IT environments. Services must align with federal cybersecurity frameworks and demonstrate measurable progress toward full compliance. The effort is governed under NAICS code 541512, indicating it falls within computer systems design and related services, and is tied to the contract SPE7LX26FB0A4. While specific geographic performance locations are not detailed, the scope applies to systems managed by the prime contractor and must be executed in a manner that fulfills DoD obligations for CUI protection. The timeline for performance has been posted as of July 31, 2026, and the subcontract is intended to support ongoing operational readiness and compliance with federal mandates, ensuring systems remain secure and audit-ready throughout their lifecycle.