Cybersecurity Compliance & NIST SP 800-171 Assessment Services

The contract requires the performance of NIST SP 800-171 self-assessments to ensure compliance with cybersecurity requirements for the protection of controlled unclassified information related to waste tracking and reporting. This includes the development and ongoing maintenance of System Security Plans that document the implementation of security controls and the creation of Plans of Action and Milestones to address identified gaps and remediate deficiencies in a timely and structured manner. All activities must align with federal cybersecurity standards and be tailored to the specific operational environment handling sensitive waste-related data. The subcontract falls under the NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. The work is intended to support ongoing compliance efforts within a defense-related context, ensuring that systems processing unclassified but sensitive information meet rigorous federal security benchmarks. While the place of performance and point of contact are not specified, the contract is active through a DIBBS award system and requires continuous adherence to NIST guidelines to maintain authorization and operational readiness.