Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires the execution and submission of a NIST SP 800-171 assessment to validate compliance with Cybersecurity Requirements for safeguarding Controlled Unclassified Information under DFARS guidelines. This effort is part of a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and is tied to the NAICS code 541611, indicating it involves scientific and technical consulting services. The assessment must thoroughly evaluate the contractor’s systems and policies to ensure all 110 security controls outlined in NIST SP 800-171 are implemented and documented, with particular attention to protecting CUI handled on non-federal systems. Failure to meet these requirements could result in non-compliance with contractual obligations and potential loss of eligibility for future DoD work. The contract is active as of July 17, 2026, and the place of performance is not specified, suggesting work may be performed remotely or at the contractor's location, provided all security standards are met. The deliverable is a formal assessment report that will be submitted for review and approval under the contract reference SPE7L126V9010.