Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract entails the provision of cybersecurity assessment and reporting services to ensure compliance with DFARS 252.204-7019 requirements for the protection of covered defense information. The work will focus on evaluating and documenting adherence to the National Institute of Standards and Technology Special Publication 800-171 controls, which are mandated for contractors handling sensitive defense data. The assessment will include a thorough review of systems, policies, and procedures to validate implementation of required safeguards and generate formal reporting to demonstrate compliance with federal defense cybersecurity standards. This is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with the North American Industry Classification System code 541611 indicating it involves administrative management and general management consulting services. The contract was posted on July 14, 2026, and is intended to support the defense supply chain by ensuring that subcontractors maintain the necessary cybersecurity posture to protect classified and controlled unclassified information. Performance of the work is tied to the broader contractual obligations under SPE60521D8521 and SPE60526FHQV5, with delivery and compliance expectations aligned to meet DoD-wide cybersecurity mandates.