Cybersecurity Compliance & Assessment Services

The contract requires the provision of cybersecurity compliance and assessment services focused on NIST SP 800-171 requirements for covered contractor information systems. This includes conducting thorough assessments to evaluate adherence to the security controls outlined in the NIST publication, ensuring that all applicable measures are properly implemented and maintained. The contractor must also manage and sustain compliance with the Supplier Performance Risk System (SPRS), regularly updating and validating cyber posture data to reflect current compliance status and address any identified deficiencies. Support for cybersecurity documentation is a critical component, encompassing the creation, maintenance, and readiness of all required artifacts such as System Security Plans, Plans of Action and Milestones, and other evidence needed to demonstrate compliance during audits or evaluations. The work is performed under a subcontract tied to the Department of Defense through the Defense Logistics Agency, with performance expected to align with federal cybersecurity standards and timelines. The contract is classified under NAICS code 541612 for Computer Systems Design Services, indicating a focus on specialized technical execution rather than hardware procurement or general IT support.