Cybersecurity Compliance and CUI Protection (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the contractor’s systems, ensuring alignment with Defense Federal Acquisition Regulation Supplement 252.204-7012. This includes conducting regular system assessments to verify compliance, promptly reporting any cybersecurity incidents, and submitting accurate System Security Plan Readiness Scores to the Supplier Performance Risk System as mandated. The work is classified as a subcontract under the Department of Defense’s Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design services. Performance is expected to support federal cybersecurity standards regardless of geographic location, with all activities centered on securing CUI against unauthorized access, disclosure, or compromise.