Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect controlled unclassified information within the DoD supply chain. The contractor must conduct regular self-assessments to evaluate compliance with these controls and submit the resulting data to the Department of Defense Supplier Performance Risk System. This obligation extends to all subcontractors, requiring flow-down of NIST SP 800-171 requirements and verification of their compliance. The work is scoped under NAICS code 541512 for computer systems design services and is administered by the Defense Logistics Agency under the Department of Defense, with performance tied to the contract SPE4A726D0361 and delivery order SPE4A726F8421. Compliance is mandatory and continuously monitored to ensure adherence to federal cybersecurity standards across all tiers of the subcontracting network.