Cybersecurity Compliance and Data Management

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 compliance for all systems that handle Controlled Unclassified Information, ensuring that security controls are properly configured, monitored, and documented. This includes the timely submission of System Security Plan ratings through the Supplier Performance Risk System, with accurate and up-to-date reporting to reflect the current compliance posture. The contractor must also conduct thorough assessments of any subcontractors to verify they meet the same cybersecurity standards, ensuring end-to-end protection of CUI across the supply chain. All activities under this contract must align with Department of Defense expectations and be performed in support of the Defense Logistics Agency, with an emphasis on continuous compliance, documentation integrity, and risk mitigation. The work is classified as a subcontract under NAICS code 541512, focusing on computer systems design and related services, and is intended to strengthen the security posture of sensitive information systems across the defense logistics network.